SHA-1 has been considered weakened since 2004 and it is recommended not to use it in new cryptosystems. It's not the worst hash out there, by far, but it can be

SHA-1 has been considered weakened since 2004 and it is recommended not to use it in new cryptosystems. It's not the worst hash out there, by far, but it can be calculated relatively quickly which may make finding collisions easier as new insights and faster technology becomes available. Bcrypt has a variable number of iterations in the algorithm. Increasing the number of iterations makes the hashing a lot more computationally intensive. Sufficiently so to make brute force attempts intractable for now. And even when somebody has the computing power to easily calculate your hash, increasing the number of iterations will negate that advantage.