3 ms·

easy enough; on next successful login re-hash the full length of the password and store it.

• Someone 7y ago
  That would be somewhat risky; the user might have mistyped the password somewhere in the part that up to now got ignored.