title: How insecure is a salted SHA1 compared to a salted SHA512
body: <h1>SHA1 is completely insecure and should be replaced.</h1>
  
  <p>This question is 8+ years old and times have changed: 
  <a href="https://arstechnica.com/information-technology/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/" rel="nofollow noreferrer">https://arstechnica.com/information-technology/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/</a></p>
  
  <p>For passwords: <a href="https://en.wikipedia.org/wiki/PBKDF2" rel="nofollow noreferrer">https://en.wikipedia.org/wiki/PBKDF2</a></p>
  
  <p>For data: SHA3</p>
  
  <hr>
  
  <p>SHA512 is more complex than SHA1, but how much security am I losing by hashing a salted password with SHA1 compared to hashing it with 512? in terms of the time it would take for someone who has the db to crack a single password. I'm using a framework that doesn't give me easy access to SHA512, I'd have to override stuff to make it work, so I'm thinking to just use SHA1, though in the past I've always used SHA512.</p>