> But by the sounds of it, SHA1 is more than enough (given that nobody here is willing to brute force the hash I shared above?) Absolutely not and that is a ri

> But by the sounds of it, SHA1 is more than enough (given that nobody here is willing to brute force the hash I shared above?) Absolutely not and that is a ridicoulous conclusion to draw. State-level resources are absolutely not required to break sha1. > but if your password _isn't_ cracked it's moot whether it's hashed with SHA1 or something more secure, as per above? Again, absolutely not. The algorithm and cost setting have a huge impact on the practical likihood that an attacker will crack your password.