When you account for arbitrarily lengthy passwords, the chance of collisions indeed increases, but these are just unreachable. $begingroup$ As