No, they can't. You could try ro replace passwords on your service with some stupid id verification scheme, but you have not extended passwords.