@sjw Yeah, pleroma uses something like argon2 or pkbf2 with a salt that's unique to at least each instance if not each password. (too lazy to check source code for those details)
Basically you could just use password lists, which I hope are getting more and more irrelevant.

And it's probably a similar story for other fedi software.