4 ms·
That was my first thought too, but it does not satisfy the "similar" part of the requirement.
by zizee 15y ago
That was my first thought too, but it does not satisfy the "similar" part of the requirement.
- saurik 15y agoIt does, because if the new password is similar to the old one, you can either modify the old one to get the new one or modify the new one to get the old one.
- zizee 15y agoBut if you have hashed the password correctly (i.e. a one way hash) you shouldn't know what the previous passwords are. This means that you would only be able to test if the password was the same, not similar.