55 would make sense if they are using bcrypt. But since it's 32, they're probably not actually securely storing (password hashing) them at all.