Getting an upgradable password hash is a rather good idea.