Re:Frequent reauth doesn't make you more secure
by apitman on Friday June 13, 2025 @12:00AM
(#44265619)
Wouldn't this be super slow if you're using a proper password hashing algorithm?
[ Parent
| on HN ]
Yes, if it takes one cpu second to hash a password, it'll take a while to try a few like this.
You can do a quick check against the last password (which you have in clear, because it was just entered), though.