Latest article
PostgreSQL: password_encryption sets the hash for new passwords, it doesn't migrate old ones
A detailed survey of the password_encryption parameter shows that it only decides the algorithm applied to plaintext passwords at the moment of CREATE ROLE or ALTER ROLE, never converts what's already stored in pg_authid, and doesn't take part in authentication itself.
