If you use a distinct random passphrase on each site, they are virtually guaranteed not to hash to the same value under any hashing scheme. What obvious point am I missing here?