3 ms·

yeah, definitely not advocating keeping plain text passwords, ever. But previous history of hashes is bad too if the database is leaked.