Switch from SHA-1 to something better. Maybe bcrypt or something like that? Don't think that this is high priority, but should be done. EDIT: Elkarte is using sha256.