2 ms·
Question: If I change my password from mydumbphrase to mydumbphrase1 and the system says "too close to your previous password" is that proof they kept my passwo
by gfxgirl 6y ago
Question: If I change my password from mydumbphrase to mydumbphrase1 and the system says "too close to your previous password" is that proof they kept my password in plaintext and that their service in insecure?
- galgalesh 6y agoMy employer has this, but the password change form requires you to also input your previous password so that's how they do it without saving your plaintext passwords.
- phist_mcgee 6y agoYes mostly. A one char shift in your password should cause a completely unpredictable change to your final password hash. The only proper way to detect this is if you store the last 8 password hashes for example, to check that people aren't cycling.