you can get the password by one method, but before populating into that table, you need to expire the acc & when login the user will have to enter new password. then you can capture old & new pass in the table using a function and assinging a profile.