Yes, indeed. Werkzeug uses un-iterated SHA1 or MD5 [1], even; one could run through a wordlist distressingly fast. Do note that bcrypt is a binary module that

Yes, indeed. Werkzeug uses un-iterated SHA1 or MD5 [1], even; one could run through a wordlist distressingly fast. Do note that bcrypt is a binary module that may not be universally available. [1] Actually HMAC-(MD5/SHA1), what's up with that?