No, just require that the password is entered to change the user's email address. Then a new hash can be generated and stored.