Do similar passwords have similar hashes?
Posted
by SLC
on Stack Overflow
See other posts from Stack Overflow
or by SLC
Published on 2010-04-21T14:09:48Z
Indexed on
2010/04/21
14:13 UTC
Read the original article
Hit count: 228
Our computer system at work requires users to change their password every few weeks, and you cannot have the same password as you had previously. It remembers something like 20 of your last passwords. I discovered most people simply increment a digit at the end of their password, so "thisismypassword1" becomes "thisismypassword2" then 3, 4, 5 etc.
Since all of these passwords are stored somewhere, I wondered if there was any weakness in the hashes themselves, for standard hashing algorithms used to store passwords like MD5. Could a hacker increase their chances of brute-forcing the password if they have a list of hashes of similar passwords?
© Stack Overflow or respective owner