You don't need to have the user change their password to implement this kind of change -- you can generate and store the additional hashes after any successful login attempt.