Yeah, don't think that I would maintain the plain text passwords. After I create the hashed version, I would drop the plain text and rm -rf the old site. (Well

Yeah, don't think that I would maintain the plain text passwords. After I create the hashed version, I would drop the plain text and rm -rf the old site. (Well not quite but it will be on it's on from there on). My concern isn't so much about what to do in the future, because from here on out, we will only be using the hashed passwords... I guess the original question could of been summarized to: "Do you think that non-technical people realise that when they receive their passwords in an email that this is bad". Because I would like to make the transition for the users as easy as possible. They will now be accessing and editing their details from the new site.