Nobody would have to change their password, the suggested change would only affect Kickstarter's internals. You'd still have two different systems in place like

Nobody would have to change their password, the suggested change would only affect Kickstarter's internals. You'd still have two different systems in place like in the solution that was actually implemented, but both of them would contain a 'brcypt'.