diff --git a/db/migrate/20180709141748_drop_encrypted_password_column_from_user.rb b/db/migrate/20180709141748_drop_encrypted_password_column_from_user.rb
new file mode 100644
index 00000000000..d6fce556d29
--- /dev/null
+++ b/db/migrate/20180709141748_drop_encrypted_password_column_from_user.rb
@@ -0,0 +1,15 @@
+class DropEncryptedPasswordColumnFromUser < ActiveRecord::Migration[5.1]
+  def up
+    safety_assured do
+      remove_column :users, :encrypted_password
+      remove_column :users, :password_salt
+      remove_column :users, :password_cost
+    end
+  end
+
+  def down
+    add_column :users, :encrypted_password, :string, limit: 255, default: ''
+    add_column :users, :password_salt, :string
+    add_column :users, :password_cost, :string
+  end
+end
diff --git a/db/schema.rb b/db/schema.rb
index b5d46bfb506..8ab5f52df9a 100644
--- a/db/schema.rb
+++ b/db/schema.rb
@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 20180620233914) do
+ActiveRecord::Schema.define(version: 20180709141748) do
 
   # These are extensions that must be enabled in order to support this database
   enable_extension "plpgsql"
@@ -171,7 +171,6 @@
   end
 
   create_table "users", force: :cascade do |t|
-    t.string "encrypted_password", limit: 255, default: ""
     t.string "reset_password_token", limit: 255
     t.datetime "reset_password_sent_at"
     t.datetime "remember_created_at"
@@ -201,11 +200,9 @@
     t.datetime "idv_attempted_at"
     t.integer "idv_attempts", default: 0
     t.string "recovery_code"
-    t.string "password_salt"
     t.string "encryption_key"
     t.string "unique_session_id"
     t.string "recovery_salt"
-    t.string "password_cost"
     t.string "recovery_cost"
     t.string "email_fingerprint", default: "", null: false
     t.text "encrypted_email", default: "", null: false