Comment by donatj

That requires a database vulnerability to be exploited though, the average user can’t go setting hashes.