If they invalidated the password when you logged in then this is possible even if the password is hashed because you just gave it to them.