Passwords of users that have not logged in after a conversion from phpBB2 to phpBB 3.0 can be rendered unusable after upgrading to 3.1 and later due to an incorrect check for the hash prefix in the passwords_convert_p1 migration.