Not necessarily, it could simply be checking both versions of the password against the hash