Not necessarily. You could try simple variations of every single character of the password (lower/uppercase, previous/next character) and try to hash that and c

Not necessarily. You could try simple variations of every single character of the password (lower/uppercase, previous/next character) and try to hash that and compare to the previous passwords. That's just ~30 hashes for a 10 letter password.