The "test-hash-passwords" command:

Convert all local password storage to use a SHA1 hash of the password rather than cleartext. Passwords that are already stored as the SHA1 has are unchanged.