top | item 30556701

(no title)

jrodthree24 | 4 years ago

My company just fixed this. By requiring you to change your password by more than the last character. Really cutting edge security here.

discuss

order

orthecreedence|4 years ago

2password

3password

4password

...

>=]

ozim|4 years ago

https://en.wikipedia.org/wiki/Levenshtein_distance

Anything below 5 in distance gets rejected, try again, please.

While you get to change password you make 2 boxes with current and new of course and do your comparisons on it, just to explain you still keep passwords hashed.