its easy to let them type old password then new password twice, that way u can confirm it's not similar to old password atleast since u receive it in unhashed f

its easy to let them type old password then new password twice, that way u can confirm it's not similar to old password atleast since u receive it in unhashed form from the user themselves.