Are you referring to the comment -<p>&gt; The real, big risk is not using a password hash at all, and instead using &quot;salted hashes&quot;.<p>If so, your statement is incorrect. Without salting you are vulnerable to trivial rainbow table attacks [1]<p>[1] <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Rainbow_table" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Rainbow_table</a>