As you might already know SHA-1 is broken. Well it is not that I will not sleep calm anymore, but it is a reminder that every secure system has one limitation – time. Give a hacker enough time and your system is no longer secure. This reminds me a presentation that Krasimir Donchev from Microsoft Bulgaria gave last year. “The password is like a chewing gum. It is best when it is new. It doesn’t have to be left on public place. It doesn’t have to be shared.” 🙂