5 ms·
> Also good luck trying to defeat my strategy (or similar strategies) without storing more than a hash of the password Enter Old Password: Complicatedpassword1
by mypalmike 7y ago
> Also good luck trying to defeat my strategy (or similar strategies) without storing more than a hash of the password
Enter Old Password: Complicatedpassword1
Enter New Password: Complicatedpassword2
Sorry, your new password is too similar to your old password.
(Passwords are still stored and verified using hashing, but with a form like this, your most recent and new passwords are available in plaintext for comparison when you make the change.)
- loup-vaillant 7y agoCrap, I forgot about that. I guess I'll have to swap words if that ever happens: Complicatedpassword1 PasswordComplicated1 Complicatedpassword2 PasswordComplicated2 Complicatedpassword3 PasswordComplicated3 And if that fails, they win. Clearly they don't care about security, so I'll use a weaker password. And I will note it on a post-it and keep it in my wallet.