4 ms·

Though I'm pretty sure I've seen "Your password is too similar to a previous password" before, which suggests some kind of plaintext Levenshtein distance check.

Though I'm pretty sure I've seen "Your password is too similar to a previous password" before, which suggests some kind of plaintext Levenshtein distance check. "Is the same as" can be fine with a hash, but "Is too similar" is definitely a red flag.

Johnny555 9y ago
When I've seen that "your password is too similar..." warning, it was with a system that required entering my current password to set a new password, so no need to store a previous version in plaintext. Though another way around it is to apply a set of common transformations to your new password, hash it and see if it matches the previous one. I.e. if your current password is "Password123" and you try to set it to "Password1234", the system could truncate the last digit on the new password and see if it matches the current one.
- thewhitetulip 9y ago
  I think almost every system requires you to put in your current password to change new password.
- wapz 9y ago
  Aren't passwords hashed on the client side before sending it across the network? That would make your way around not work (unless that's done on the client side also after verifying from the server that it's correct).
  - rypskar 9y ago
    Hashing it on the client side will make the hash the password. So the stored hash can be used as password by turning off the client side hashing, for instance by turning off javascript. You use https to avoid sending the password in cleartext over the network
  - matthewmacleod 9y ago
    I've certainly never encountered a web app that hashes locally before sending. I suppose it could work if this was at the account creation or password management stages, but you couldn't implement it at the login stage for obvious reasons. I'm having trouble imagining what scenario client-side hashing would protect against.
    - consp 9y ago
      Man in the middle attacks fetching for plaintext passwords -- edit: using a KDF would improve it even more.
      - anonymouz 9y ago
        If the client only sends the hash to the server, a MitM also only needs to capture the hash.
      - croon 9y ago
        Sure, but if they've MITM:ed your trusted certs, aren't you already boned in so many ways?

Johnny555 9y ago

When I've seen that "your password is too similar..." warning, it was with a system that required entering my current password to set a new password, so no need to store a previous version in plaintext. Though another way around it is to apply a set of common transformations to your new password, hash it and see if it matches the previous one. I.e. if your current password is "Password123" and you try to set it to "Password1234", the system could truncate the last digit on the new password and see if it matches the current one.

thewhitetulip 9y ago
I think almost every system requires you to put in your current password to change new password.
wapz 9y ago
Aren't passwords hashed on the client side before sending it across the network? That would make your way around not work (unless that's done on the client side also after verifying from the server that it's correct).
- rypskar 9y ago
  Hashing it on the client side will make the hash the password. So the stored hash can be used as password by turning off the client side hashing, for instance by turning off javascript. You use https to avoid sending the password in cleartext over the network
- matthewmacleod 9y ago
  I've certainly never encountered a web app that hashes locally before sending. I suppose it could work if this was at the account creation or password management stages, but you couldn't implement it at the login stage for obvious reasons. I'm having trouble imagining what scenario client-side hashing would protect against.
  - consp 9y ago
    Man in the middle attacks fetching for plaintext passwords -- edit: using a KDF would improve it even more.
    - anonymouz 9y ago
      If the client only sends the hash to the server, a MitM also only needs to capture the hash.
    - croon 9y ago
      Sure, but if they've MITM:ed your trusted certs, aren't you already boned in so many ways?