if the site knows my previous password after I reset it, why does it not accept it in the first place?

268 views

This has happened more than a few times for me, a site I’m on will suddenly not accept my correct password, forcing me to reset it, only for it to say “new password can’t be the same as the old password” when I try it as the new one, if it knew the password was the old password, why not just let me login in the first place?

Edit: I think most of the answers here are misunderstanding the question, I know for certain I’m using the correct password at first, once it forces me to reset, I type in the SAME password to check if this situation is happening and that’s when it says “new password can’t be the same as the old password”, I then give up and make a new one cuz what else can I do. This has happened about a dozen times over my time on the internet

In: 25

12 Answers

Anonymous 0 Comments

Good question. I guess somebody started it, and then everybody did it and it’s also relatively easy to implement. But it’s not really beneficial to change passwords regularly, they certainly don’t go bad over time. It makes passwords even harder to memorize and encourages bad practices like weak passwords, so there are not many places left that still do that.

You are viewing 1 out of 12 answers, click here to view all answers.