Yes, and thanks to tptacek's advice on HN we have used bcrypt for passwords from the get go.