Why 6.8% specifically?

It is written. "0.1% for each month since the browser was released"

You can also just hash the existing hashes. bcrypt(salt + old_md5). New passwords can use a new MD5-less scheme.