College

If password aging is based on previous passwords, why should those previous passwords not be stored in clear text on disk?

Answer :

Final answer:

Previous passwords should not be stored in the clear on disk for security reasons. Storing passwords in the clear exposes them to potential misuse if the disk is accessed by unauthorized individuals. The recommended best practice is to store passwords in a hashed form that can't be easily decrypted, even if the disk is compromised.

Explanation:

Password aging is a measure often adopted in systems to ensure security. While using previous passwords for password aging can enhance security through added complexity, storing these passwords in the clear on a disk can significantly compromise it. Storing passwords in the clear means that they are fully visible, without any form of encryption or hashing. If an unauthorized person gains access to the disk, they can easily read and possibly misuse those passwords, leading to significant security threats. To combat this issue, passwords are usually stored after being subjected to a one-way hashing process. Even if an unauthorized person gains access to the disk, the hashed passwords cannot be easily decrypted. This is also true for the previous passwords implemented in a password-aging concept. For maximum security, previous passwords, like the current password, should be stored in hashed form rather than in the clear.

Learn more about Password storage here:

https://brainly.com/question/32327490

#SPJ11