servicea.28287 (Customer) asked a question.
Enforce password history for last
Our password policy has the "Enforce password history for last" feature enabled. However, it treats "Pass1234" as a common password and does not allow users to set it, whereas it accepts "Pass@123" as a password for multiple users in our test environment. We've set the value of the "Enforce password history for last" function to 4, thus it shouldn't enable the last four passwords to be used again, right? I'm not sure if this functionality is working or not, and if you guys could explain to me what the actual logic is here, such as how Okta checks that this is one of the frequently used passwords?
Hi Megha Rathod,
Okta will not disclose the list of common/breached passwords for security concerns. Maybe Pass@123 is not in the list of breached passwords.
Also, Enforcing password history will not come into picture in your case since the same password is being set by multiple users and not that the previous passwords is set by the user again .
Please upvote if we are able to address your query.