I'm hesitant about such a thing. Even if they are only taking some of the password and hashing it, this makes me uneasy.