Is there something we can do to prevent multiple users from assigning the same password?

Question

I have a web application that processes employee worksheets.

They have username and password combinations assigned to them by the administrator.

Passwords are salted and hashed individually.

The problem is that all of them are assigned the same password by the administrator. This is obviously a security issue.

I do not want the error with the password you are trying to use to be already used, because ...

• This shows that someone has this password. Bad security.
• I cannot compare passwords easily. I need to salt and hash them individually because of how they are stored in the database.

Do I have any opportunity to try to limit this behavior?

Answer 1

The software should force users to change their passwords after logging in for the first time. Ask the program to check if the user is really entering a new password, and not repeating the old one.

Answer 2

This is not a technical problem; this is an organization / management problem ...

An administrator just needs to stop assigning the same password to everyone.

Answer 3

? .