[slmbrhrt]

Right, at a glance you could see if someone used the same password in more than one place. Of course, you could circumvent the whole issue by pairing the url with the password to generate the hash.