3 ms·
It is easy to determine previous password. Just store the previous hashes with the salt and check it when the user changes the password. The too similar chec
by adrr 5y ago
It is easy to determine previous password. Just store the previous hashes with the salt and check it when the user changes the password. The too similar checks are easy when you require the previous password. You can compare the new and old passwords together.