If you want to log in from a different browser or device they need to agree on how this hashing works. This also means that everyone else knows how this hashing

If you want to log in from a different browser or device they need to agree on how this hashing works. This also means that everyone else knows how this hashing works and can construct rainbow tables for it. Still better than plain text but nothing stopping a determined hacker. Anything else is just encrypting the transport, which we already do with HTTPS. Otherwise there is the ongoing work to of passkeys.