What is the purpose of confirming old password to create a new password
https://security.stackexchange.com/questions/162021/what-is-the-purpose-of-confirming-old-password-to-create-a-new-password
WEBJun 15, 2017 · If you are enforcing a password change, you can then check that the old and new passwords don't match, without needing to store the old password in a recoverable form - you can check it, then check that the new one isn't the same, even with fully salted password hashes.
DA: 65 PA: 81 MOZ Rank: 28