Does server stores my previous passwords?












3














When I change my password on some web server like email, cloud, social network and try to use my previous password, server denied it with message "Don't use your previous passwords".
- Does it mean that server stores my my previous passwords? How does it secure?






passwords






share





























    3














    When I change my password on some web server like email, cloud, social network and try to use my previous password, server denied it with message "Don't use your previous passwords".
    - Does it mean that server stores my my previous passwords? How does it secure?






    passwords






    share



























      3












      3








      3







      When I change my password on some web server like email, cloud, social network and try to use my previous password, server denied it with message "Don't use your previous passwords".
      - Does it mean that server stores my my previous passwords? How does it secure?






      passwords






      share















      When I change my password on some web server like email, cloud, social network and try to use my previous password, server denied it with message "Don't use your previous passwords".
      - Does it mean that server stores my my previous passwords? How does it secure?






      passwords




      passwords





      share














      share












      share



      share








      edited 6 hours ago









      Community♦

      1




      1










      asked 11 hours ago









      sluge

      417145




      417145






















          3 Answers
          3






          active

          oldest

          votes


















          10














          Hash functions deterministic functions, same input results always the same output. They can store the previous hash values of your old passwords and compare them with your new proposed password's hash. To achieve this, they also need to store at least the salt values, too. This means the salt and other parameters has to be the same for you in this site.



          As pointed out by Micheal




          The salt for the old passwords does not have to be the same as the new one.




          In this way, you can use different salts and other parameters. This can be considered more secure than reusing the salt. This, however, increases the storage.



          From here, without the server side code, we cannot say more than like this.






          share|improve this answer



















          • 1




            Especially if salt is a user name or user's email.
            – sluge
            10 hours ago






          • 4




            Also, note that if the server answers "your new password is too similar to the password you had 1 month ago" instead, then it means that they have stored it in plain text, or that they have done something almost as insecure as storing it in plain text. Run, don't walk.
            – Federico Poloni
            8 hours ago






          • 10




            @FedericoPoloni: Theoretically, they could compute a number of slight variations of the new password and compare their hashes against the old hash. That doesn't require storing the password.
            – Jörg W Mittag
            7 hours ago






          • 1




            This is indeed used in some corporate network: the hashed passwords (including salt) are archived to prevent users do resurect previous passwords.
            – Serge Ballesta
            4 hours ago






          • 1




            @DreamConspiracy Wiki states that it aims to maximize the probability of a “collision” for similar items This is a not a good property for Cryptographic hash functions.
            – kelalaka
            1 hour ago



















          1














          Most of the time you have to reauthenticate in order to change your password. In this case, the backend could




          • Hash the (old) password you provided and compare it to the stored hash for authentication


          • Compare the clear text (old) password with the clear text (new) password with metrics like Levenshtein in order to prevent a password change like



            S3cur3Pa55w0rd_1 -> S3cur3Pa55w0rd_2








          share|improve this answer

















          • 2




            As I know it's very insecure to store password as clean text. Do you really believe that someone stores password as a clear text?
            – sluge
            5 hours ago










          • The backend receives the password in clear text ... How should it calculate the hash otherwise? However, it is considered a best practice to remove it from memory as soon as possible.
            – Stefan Braun
            5 hours ago






          • 1




            @StefanBraun but to compare the old password, it would need to be stored in clear text. That's what sluge is asking. In your scenario, what you have omitted is that the re-entering of the current password is stored in memory for the purposes of comparison. Adding that detail might be helpful.
            – schroeder♦
            5 hours ago








          • 1




            Not really, often you have a form which lets you enter the current password as well as the new one. Which is of course (leaving TSL out of consideration) plaintext, and trivial for the server to compare. No need to actually store it plaintext.
            – Damon
            4 hours ago





















          0














          No.



          Think about it this way: When a site checks whether the input you entered into the 'password field' was correct, does that mean the server knows (read: stores in plain text) your current password?






          share|improve this answer





















            Your Answer








            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "162"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: false,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: null,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            noCode: true, onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsecurity.stackexchange.com%2fquestions%2f200376%2fdoes-server-stores-my-previous-passwords%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            3 Answers
            3






            active

            oldest

            votes








            3 Answers
            3






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            10














            Hash functions deterministic functions, same input results always the same output. They can store the previous hash values of your old passwords and compare them with your new proposed password's hash. To achieve this, they also need to store at least the salt values, too. This means the salt and other parameters has to be the same for you in this site.



            As pointed out by Micheal




            The salt for the old passwords does not have to be the same as the new one.




            In this way, you can use different salts and other parameters. This can be considered more secure than reusing the salt. This, however, increases the storage.



            From here, without the server side code, we cannot say more than like this.






            share|improve this answer



















            • 1




              Especially if salt is a user name or user's email.
              – sluge
              10 hours ago






            • 4




              Also, note that if the server answers "your new password is too similar to the password you had 1 month ago" instead, then it means that they have stored it in plain text, or that they have done something almost as insecure as storing it in plain text. Run, don't walk.
              – Federico Poloni
              8 hours ago






            • 10




              @FedericoPoloni: Theoretically, they could compute a number of slight variations of the new password and compare their hashes against the old hash. That doesn't require storing the password.
              – Jörg W Mittag
              7 hours ago






            • 1




              This is indeed used in some corporate network: the hashed passwords (including salt) are archived to prevent users do resurect previous passwords.
              – Serge Ballesta
              4 hours ago






            • 1




              @DreamConspiracy Wiki states that it aims to maximize the probability of a “collision” for similar items This is a not a good property for Cryptographic hash functions.
              – kelalaka
              1 hour ago
















            10














            Hash functions deterministic functions, same input results always the same output. They can store the previous hash values of your old passwords and compare them with your new proposed password's hash. To achieve this, they also need to store at least the salt values, too. This means the salt and other parameters has to be the same for you in this site.



            As pointed out by Micheal




            The salt for the old passwords does not have to be the same as the new one.




            In this way, you can use different salts and other parameters. This can be considered more secure than reusing the salt. This, however, increases the storage.



            From here, without the server side code, we cannot say more than like this.






            share|improve this answer



















            • 1




              Especially if salt is a user name or user's email.
              – sluge
              10 hours ago






            • 4




              Also, note that if the server answers "your new password is too similar to the password you had 1 month ago" instead, then it means that they have stored it in plain text, or that they have done something almost as insecure as storing it in plain text. Run, don't walk.
              – Federico Poloni
              8 hours ago






            • 10




              @FedericoPoloni: Theoretically, they could compute a number of slight variations of the new password and compare their hashes against the old hash. That doesn't require storing the password.
              – Jörg W Mittag
              7 hours ago






            • 1




              This is indeed used in some corporate network: the hashed passwords (including salt) are archived to prevent users do resurect previous passwords.
              – Serge Ballesta
              4 hours ago






            • 1




              @DreamConspiracy Wiki states that it aims to maximize the probability of a “collision” for similar items This is a not a good property for Cryptographic hash functions.
              – kelalaka
              1 hour ago














            10












            10








            10






            Hash functions deterministic functions, same input results always the same output. They can store the previous hash values of your old passwords and compare them with your new proposed password's hash. To achieve this, they also need to store at least the salt values, too. This means the salt and other parameters has to be the same for you in this site.



            As pointed out by Micheal




            The salt for the old passwords does not have to be the same as the new one.




            In this way, you can use different salts and other parameters. This can be considered more secure than reusing the salt. This, however, increases the storage.



            From here, without the server side code, we cannot say more than like this.






            share|improve this answer














            Hash functions deterministic functions, same input results always the same output. They can store the previous hash values of your old passwords and compare them with your new proposed password's hash. To achieve this, they also need to store at least the salt values, too. This means the salt and other parameters has to be the same for you in this site.



            As pointed out by Micheal




            The salt for the old passwords does not have to be the same as the new one.




            In this way, you can use different salts and other parameters. This can be considered more secure than reusing the salt. This, however, increases the storage.



            From here, without the server side code, we cannot say more than like this.







            share|improve this answer














            share|improve this answer



            share|improve this answer








            edited 2 mins ago









            WELZ

            3952310




            3952310










            answered 11 hours ago









            kelalaka

            7201616




            7201616








            • 1




              Especially if salt is a user name or user's email.
              – sluge
              10 hours ago






            • 4




              Also, note that if the server answers "your new password is too similar to the password you had 1 month ago" instead, then it means that they have stored it in plain text, or that they have done something almost as insecure as storing it in plain text. Run, don't walk.
              – Federico Poloni
              8 hours ago






            • 10




              @FedericoPoloni: Theoretically, they could compute a number of slight variations of the new password and compare their hashes against the old hash. That doesn't require storing the password.
              – Jörg W Mittag
              7 hours ago






            • 1




              This is indeed used in some corporate network: the hashed passwords (including salt) are archived to prevent users do resurect previous passwords.
              – Serge Ballesta
              4 hours ago






            • 1




              @DreamConspiracy Wiki states that it aims to maximize the probability of a “collision” for similar items This is a not a good property for Cryptographic hash functions.
              – kelalaka
              1 hour ago














            • 1




              Especially if salt is a user name or user's email.
              – sluge
              10 hours ago






            • 4




              Also, note that if the server answers "your new password is too similar to the password you had 1 month ago" instead, then it means that they have stored it in plain text, or that they have done something almost as insecure as storing it in plain text. Run, don't walk.
              – Federico Poloni
              8 hours ago






            • 10




              @FedericoPoloni: Theoretically, they could compute a number of slight variations of the new password and compare their hashes against the old hash. That doesn't require storing the password.
              – Jörg W Mittag
              7 hours ago






            • 1




              This is indeed used in some corporate network: the hashed passwords (including salt) are archived to prevent users do resurect previous passwords.
              – Serge Ballesta
              4 hours ago






            • 1




              @DreamConspiracy Wiki states that it aims to maximize the probability of a “collision” for similar items This is a not a good property for Cryptographic hash functions.
              – kelalaka
              1 hour ago








            1




            1




            Especially if salt is a user name or user's email.
            – sluge
            10 hours ago




            Especially if salt is a user name or user's email.
            – sluge
            10 hours ago




            4




            4




            Also, note that if the server answers "your new password is too similar to the password you had 1 month ago" instead, then it means that they have stored it in plain text, or that they have done something almost as insecure as storing it in plain text. Run, don't walk.
            – Federico Poloni
            8 hours ago




            Also, note that if the server answers "your new password is too similar to the password you had 1 month ago" instead, then it means that they have stored it in plain text, or that they have done something almost as insecure as storing it in plain text. Run, don't walk.
            – Federico Poloni
            8 hours ago




            10




            10




            @FedericoPoloni: Theoretically, they could compute a number of slight variations of the new password and compare their hashes against the old hash. That doesn't require storing the password.
            – Jörg W Mittag
            7 hours ago




            @FedericoPoloni: Theoretically, they could compute a number of slight variations of the new password and compare their hashes against the old hash. That doesn't require storing the password.
            – Jörg W Mittag
            7 hours ago




            1




            1




            This is indeed used in some corporate network: the hashed passwords (including salt) are archived to prevent users do resurect previous passwords.
            – Serge Ballesta
            4 hours ago




            This is indeed used in some corporate network: the hashed passwords (including salt) are archived to prevent users do resurect previous passwords.
            – Serge Ballesta
            4 hours ago




            1




            1




            @DreamConspiracy Wiki states that it aims to maximize the probability of a “collision” for similar items This is a not a good property for Cryptographic hash functions.
            – kelalaka
            1 hour ago




            @DreamConspiracy Wiki states that it aims to maximize the probability of a “collision” for similar items This is a not a good property for Cryptographic hash functions.
            – kelalaka
            1 hour ago













            1














            Most of the time you have to reauthenticate in order to change your password. In this case, the backend could




            • Hash the (old) password you provided and compare it to the stored hash for authentication


            • Compare the clear text (old) password with the clear text (new) password with metrics like Levenshtein in order to prevent a password change like



              S3cur3Pa55w0rd_1 -> S3cur3Pa55w0rd_2








            share|improve this answer

















            • 2




              As I know it's very insecure to store password as clean text. Do you really believe that someone stores password as a clear text?
              – sluge
              5 hours ago










            • The backend receives the password in clear text ... How should it calculate the hash otherwise? However, it is considered a best practice to remove it from memory as soon as possible.
              – Stefan Braun
              5 hours ago






            • 1




              @StefanBraun but to compare the old password, it would need to be stored in clear text. That's what sluge is asking. In your scenario, what you have omitted is that the re-entering of the current password is stored in memory for the purposes of comparison. Adding that detail might be helpful.
              – schroeder♦
              5 hours ago








            • 1




              Not really, often you have a form which lets you enter the current password as well as the new one. Which is of course (leaving TSL out of consideration) plaintext, and trivial for the server to compare. No need to actually store it plaintext.
              – Damon
              4 hours ago


















            1














            Most of the time you have to reauthenticate in order to change your password. In this case, the backend could




            • Hash the (old) password you provided and compare it to the stored hash for authentication


            • Compare the clear text (old) password with the clear text (new) password with metrics like Levenshtein in order to prevent a password change like



              S3cur3Pa55w0rd_1 -> S3cur3Pa55w0rd_2








            share|improve this answer

















            • 2




              As I know it's very insecure to store password as clean text. Do you really believe that someone stores password as a clear text?
              – sluge
              5 hours ago










            • The backend receives the password in clear text ... How should it calculate the hash otherwise? However, it is considered a best practice to remove it from memory as soon as possible.
              – Stefan Braun
              5 hours ago






            • 1




              @StefanBraun but to compare the old password, it would need to be stored in clear text. That's what sluge is asking. In your scenario, what you have omitted is that the re-entering of the current password is stored in memory for the purposes of comparison. Adding that detail might be helpful.
              – schroeder♦
              5 hours ago








            • 1




              Not really, often you have a form which lets you enter the current password as well as the new one. Which is of course (leaving TSL out of consideration) plaintext, and trivial for the server to compare. No need to actually store it plaintext.
              – Damon
              4 hours ago
















            1












            1








            1






            Most of the time you have to reauthenticate in order to change your password. In this case, the backend could




            • Hash the (old) password you provided and compare it to the stored hash for authentication


            • Compare the clear text (old) password with the clear text (new) password with metrics like Levenshtein in order to prevent a password change like



              S3cur3Pa55w0rd_1 -> S3cur3Pa55w0rd_2








            share|improve this answer












            Most of the time you have to reauthenticate in order to change your password. In this case, the backend could




            • Hash the (old) password you provided and compare it to the stored hash for authentication


            • Compare the clear text (old) password with the clear text (new) password with metrics like Levenshtein in order to prevent a password change like



              S3cur3Pa55w0rd_1 -> S3cur3Pa55w0rd_2









            share|improve this answer












            share|improve this answer



            share|improve this answer










            answered 6 hours ago









            Stefan Braun

            731510




            731510








            • 2




              As I know it's very insecure to store password as clean text. Do you really believe that someone stores password as a clear text?
              – sluge
              5 hours ago










            • The backend receives the password in clear text ... How should it calculate the hash otherwise? However, it is considered a best practice to remove it from memory as soon as possible.
              – Stefan Braun
              5 hours ago






            • 1




              @StefanBraun but to compare the old password, it would need to be stored in clear text. That's what sluge is asking. In your scenario, what you have omitted is that the re-entering of the current password is stored in memory for the purposes of comparison. Adding that detail might be helpful.
              – schroeder♦
              5 hours ago








            • 1




              Not really, often you have a form which lets you enter the current password as well as the new one. Which is of course (leaving TSL out of consideration) plaintext, and trivial for the server to compare. No need to actually store it plaintext.
              – Damon
              4 hours ago
















            • 2




              As I know it's very insecure to store password as clean text. Do you really believe that someone stores password as a clear text?
              – sluge
              5 hours ago










            • The backend receives the password in clear text ... How should it calculate the hash otherwise? However, it is considered a best practice to remove it from memory as soon as possible.
              – Stefan Braun
              5 hours ago






            • 1




              @StefanBraun but to compare the old password, it would need to be stored in clear text. That's what sluge is asking. In your scenario, what you have omitted is that the re-entering of the current password is stored in memory for the purposes of comparison. Adding that detail might be helpful.
              – schroeder♦
              5 hours ago








            • 1




              Not really, often you have a form which lets you enter the current password as well as the new one. Which is of course (leaving TSL out of consideration) plaintext, and trivial for the server to compare. No need to actually store it plaintext.
              – Damon
              4 hours ago










            2




            2




            As I know it's very insecure to store password as clean text. Do you really believe that someone stores password as a clear text?
            – sluge
            5 hours ago




            As I know it's very insecure to store password as clean text. Do you really believe that someone stores password as a clear text?
            – sluge
            5 hours ago












            The backend receives the password in clear text ... How should it calculate the hash otherwise? However, it is considered a best practice to remove it from memory as soon as possible.
            – Stefan Braun
            5 hours ago




            The backend receives the password in clear text ... How should it calculate the hash otherwise? However, it is considered a best practice to remove it from memory as soon as possible.
            – Stefan Braun
            5 hours ago




            1




            1




            @StefanBraun but to compare the old password, it would need to be stored in clear text. That's what sluge is asking. In your scenario, what you have omitted is that the re-entering of the current password is stored in memory for the purposes of comparison. Adding that detail might be helpful.
            – schroeder♦
            5 hours ago






            @StefanBraun but to compare the old password, it would need to be stored in clear text. That's what sluge is asking. In your scenario, what you have omitted is that the re-entering of the current password is stored in memory for the purposes of comparison. Adding that detail might be helpful.
            – schroeder♦
            5 hours ago






            1




            1




            Not really, often you have a form which lets you enter the current password as well as the new one. Which is of course (leaving TSL out of consideration) plaintext, and trivial for the server to compare. No need to actually store it plaintext.
            – Damon
            4 hours ago






            Not really, often you have a form which lets you enter the current password as well as the new one. Which is of course (leaving TSL out of consideration) plaintext, and trivial for the server to compare. No need to actually store it plaintext.
            – Damon
            4 hours ago













            0














            No.



            Think about it this way: When a site checks whether the input you entered into the 'password field' was correct, does that mean the server knows (read: stores in plain text) your current password?






            share|improve this answer


























              0














              No.



              Think about it this way: When a site checks whether the input you entered into the 'password field' was correct, does that mean the server knows (read: stores in plain text) your current password?






              share|improve this answer
























                0












                0








                0






                No.



                Think about it this way: When a site checks whether the input you entered into the 'password field' was correct, does that mean the server knows (read: stores in plain text) your current password?






                share|improve this answer












                No.



                Think about it this way: When a site checks whether the input you entered into the 'password field' was correct, does that mean the server knows (read: stores in plain text) your current password?







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered 59 mins ago









                pytago

                991




                991






























                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Information Security Stack Exchange!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid …



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.





                    Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


                    Please pay close attention to the following guidance:


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid …



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsecurity.stackexchange.com%2fquestions%2f200376%2fdoes-server-stores-my-previous-passwords%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    -

                    Popular posts from this blog

                    What visual should I use to simply compare current year value vs last year in Power BI desktop

                    Image
                    0 I have column SubToBind that shows current year ratio and column PY SubToBind which shows previous year ratio. How can I simply create a card that would be displaying them both in a nice way? Something like that: I cannot achieve that with regular card, I also tried Card with States by OKViz but also unable to see both values. In KPI visual - I dont like the word "Goal", it will confuse end users. Are there any cards or other visuals that would do the job? Thanks powerbi dax powerbi-embedded share | improve this question edited Jun 11 '18 at 20:11 Oleg
                    Read more

                    Alexandru Averescu

                    Image
                    Alexandre Averescu Alexandru Averescu Naissance 3 avril 1859 Babele, Ismail  (ro) près de Izmaïl (principauté de Moldavie) Décès 2 octobre 1938 (à 79 ans) [ 1 ] Bucarest Origine   Roumanie Arme cavalerie Grade Maréchal Années de service 1901-1917 Commandement chef d'état-major général 2 e  armée 3 e  armée Groupe d'armée sud armée du Danube Conflits Guerre russo-turque de 1877-1878 Deuxième guerre balkanique Première Guerre mondiale Faits d'armes Bataille de Turtucaia/Tutrakan Bataille de Mărăști Distinctions Autres fonctions 3 fois président du Conseil des ministres ministre des Affaires étrangères ministre sans portefeuille conseiller de la Couronne modifier   Alexandre Averescu (en roumain : Alexandru Averescu .mw-parser-output .prononciation>a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/8/8a/Loudspeaker.svg/11px-Loudspeaker.svg.png")center
                    Read more

                    Trompette piccolo

                    Image
                    Ne doit pas être confondu avec trompette de poche. Trompette piccolo en si bémol, avec des branches d'embouchure différentes pour le si bémol (la plus courte) ou la (la plus longue) Trompette piccolo La trompette piccolo est la plus petite de la famille des trompettes. Elle joue une octave plus haut que la trompette standard en si bémol. La plupart des trompettes piccolo sont conçues pour jouer dans les deux tonalités de si bémol ou la, en utilisant une branche d'embouchure différente pour chaque tonalité. Le tube de la trompette piccolo en si bémol a une longueur moitié de celle de la trompette normale en si bémol. Des trompettes piccolo en sol, fa, ut sont également fabriquées, mais elles sont rares. La trompette soprano en ré, aussi connu comme la « trompette Bach », a été inventée vers 1890 par le facteur belge Victor-Charles Mahillon pour jouer les parties hautes de la trompette dans la musique de Bach et Haendel. La trompette piccolo moderne permet aux
                    Read more