Which would mean we have to detect what auth mechanism they were previously using, rather than just having it work automatically. Seems like Marc's solution is much easier for users? I mean don't get me wrong, I would much prefer they were prefixed correctly, so maybe we can just come up with an easy way for users to let phpBB know what format uncoverted passwords are in?