Author

Topic: Re-Hashing password... (Read 560 times)

legendary
Activity: 1932
Merit: 1042
https://locktrip.com/?refId=40964
May 26, 2015, 01:24:51 PM
#7
i need to understand...
if i change my password inserting the old one, the new generated hash, it is like the oldone or it is different?
simple example to let me explain better.

my old passwor: rehash
i go under "Account Related Settings" to rehash it and i write

Choose password: rehash
Verufy password: rehash
Current Password: rehash

the hash it is regenerated like the oldone, and the operation it is a non sense?
or it is generate a new hash and i'm safe?

thanks


Even if the hash does change, it doesn't matter because the hacker would be testing against the same password. So, if he has a dump of your hash and manages to crack it, then it will show your password as "rehash". Which you still have as your password. So changing it to the same thing...wouldn't help you.

ok i understand..
maybe the hashing algo it is something like one-way MD5 or SHA???
or maybe somethings lke keccak who is even more secure?
staff
Activity: 3304
Merit: 4115
May 25, 2015, 01:02:06 PM
#6
i need to understand...
if i change my password inserting the old one, the new generated hash, it is like the oldone or it is different?
simple example to let me explain better.

my old passwor: rehash
i go under "Account Related Settings" to rehash it and i write

Choose password: rehash
Verufy password: rehash
Current Password: rehash

the hash it is regenerated like the oldone, and the operation it is a non sense?
or it is generate a new hash and i'm safe?

thanks


Even if the hash does change, it doesn't matter because the hacker would be testing against the same password. So, if he has a dump of your hash and manages to crack it, then it will show your password as "rehash". Which you still have as your password. So changing it to the same thing...wouldn't help you.
legendary
Activity: 1022
Merit: 1007
Sooner or later, a man who wears two faces forgets
May 25, 2015, 12:58:18 PM
#5
The forum was up yesterday for some minutes and i happened to stumble on it at correct time and as i received the Mail , i changed my Password instantly but today when i logged in , it showed the password to be wrong. So i tried the old password , it was Good. So the passwords changed yesterday didn't worked . So it's better you change your password and Secret Question if any
legendary
Activity: 1680
Merit: 1205
May 25, 2015, 12:17:42 PM
#4
I don't really know it for sure, but I think that with the hash they could revese-engeneer your password... so non sense.
legendary
Activity: 975
Merit: 1003
May 25, 2015, 12:17:39 PM
#3
Still, you shouldn't use your old password again.
vip
Activity: 448
Merit: 252
May 25, 2015, 12:16:44 PM
#2
No! you need to use a new password, the old one might be recoverable.
legendary
Activity: 1932
Merit: 1042
https://locktrip.com/?refId=40964
May 25, 2015, 12:15:46 PM
#1
i need to understand...
if i change my password inserting the old one, the new generated hash, it is like the oldone or it is different?
simple example to let me explain better.

my old passwor: rehash
i go under "Account Related Settings" to rehash it and i write

Choose password: rehash
Verufy password: rehash
Current Password: rehash

the hash it is regenerated like the oldone, and the operation it is a non sense?
or it is generate a new hash and i'm safe?

thanks
Jump to: