Comment by cluckindan

Or just salt the string with the username before hashing.