Change Password Functionality

[Priyadharshini.s]

Hello there,

I have a requirement for developing a functionality such that a password expires every 90 days and the user has to change the password..for this i made use of acegi in Spring to check if the user's credentials expired...while changing the new password should not be same as 3 last used passwords..i have no idea now which way could the function be...could you please give me an idea how to check the password with 3 last used passwords..do we need to save the 3 passwords in a database and check or is there any other specific method to handle the issue.


Please reply me ASAP.

Thanks in advance,
Priyadharshini

[Eranga]

I think the best solution is store the encrypted password in a database. Simply you can work with hashing methods there.

[Priyadharshini.s]

Can u please give the same code to implement the function - encrypting and hashing etc

[Priyadharshini.s]

sorry! sample code

[sanjeevtarar]

Hi..

you can use SHA-1, SHA-2, MD-5 etc. to encrypt password.

[Eranga]

Sorry I don't have a sample code. But the javax.crypto package included all you need.