If someone has local access then it&#x27;s easy to crack any passwords (of any hashing algo). However if the cracker has local access and&#x2F;or full access to DB then weak password hashing is one of the least problems..<p>Making password checking slower is very easy if the cracker doesn&#x27;t have local access. Just sleep for XXX ms at every hash check and double it for every incorrect attempt (per IP).