after update from legacy crypto to Blowfish an update is needed. User still can let send them a link to change the password.