It would not be good if these clients of yours are still using MD5 for their passwords since it has well known collision problems. I thought more recent hash functions like the SHA-2 class of hash functions basically eliminated collisions.