Forewarned is forearmed...

On his Blogorroico, Antonio Cavedoni warns not to use the password() function to encrypt user passwords on MySQL (these reasons).

And, even more interestingly, it provides an almost painless procedure to update passwords by encrypting them with MD5() or, even better, SHA1().