3 ms·
Why? I suspect that just means that they keep the various versions of your hashed password. Some regulatory requirements mandate that passwords not be re-used
by Diederich 11y ago
Why? I suspect that just means that they keep the various versions of your hashed password. Some regulatory requirements mandate that passwords not be re-used for a period of time; that would be enforced the same way.
- Nadya 11y agoYou're thinking of the wrong attack vector/issue with this. Imagine your account was compromised. You reclaim your account. The previous cracker recovers your account from you because they knew your previous password and went through the recovery process. The above happens more often than you might think.