4 ms·
A number of sites don't allow you to reuse iterations of old passwords (not sure exactly, but perhaps can't have more then 4 repeating chars). So you can't simp
by mgfist 3y ago
A number of sites don't allow you to reuse iterations of old passwords (not sure exactly, but perhaps can't have more then 4 repeating chars). So you can't simply append, you have to change the actual password a considerable amount.
Had a few websites like that, they were the bane of my existence until I got a password manager.
- tjx 3y agoThat's a serious security risk if a website knows your older password and you're newer password is just one character different than the older one. old: year-password-counter (23supassword1) new: year-password-counter++ (23supassword2) If website tells you that you cannot use your new password, then it screams that they're somewhat storing/accessing the old password. If they're storing just the hash, there's NO way it could have been detected. (Unless they take your new password and then check from a-z0-9 last characters, convert to its hash and then compare with old password hash) but in my entire IT Security career, I have never seen it doing anywhere.
- mgfist 3y agoIt absolutely is. It was my university website so couldn't avoid it either.