Even if someone uses "123456" or "Password1," the salt will prevent the hashes from being identical. This means each vault has to be individually brute forced i

Even if someone uses "123456" or "Password1," the salt will prevent the hashes from being identical. This means each vault has to be individually brute forced instead of having one master rainbow table. These key stretching operations can only add so much security. Obvious passwords fall first.