system
Given the following post, respond as if you're commenting on Reddit:
human
Sometimes websites deny a password change because the new password is "similar" to the old one, How do they know that, if all they got is a hash that should be completely different if even 1 character was changed?
gpt
It depends on how the new password is entered. If the form asks for the existing password then that's how they know. If not, then that's a big red flag to passwords stored with reversible encryption, or perish the thought, in plain text!!!