Comment Comment by nameismypw How are you going to rehash them without having the cleartext password? Hash the SHA1s to bcrypt and then check every password's bcrypt and SHA1*bcrypt's password from then on? parent nameismypw 7 years ago