On the reset password, I want to verify that the users are not putting same passwords as the ones they already had, or at least not the direct last one.
Example:
Previous password: Bubble01
On the reset page if the user puts again Bubble01, an alert is shown to choose a different password.
Has anyone found a solution to this? I can’t figure out a way to do it.
While setting password, store the password text in a “List of previous passwords” associated with the user with encryption.
When user wants to set a new password, look for the new password in the “List of previous passwords”, if it’s there, password is already used, if not, it’s not used.
I don’t recommend it though.