After a user specifies a new password, CloudBlue Commerce checks it against the database. If the password has already been used by this user within the defined password history storage period, CloudBlue Commerce returns an error message. This is done to ensure that a user does not specify the same password several times.
You, as the provider, can configure a length of the period during which users' passwords are stored in the CloudBlue Commerce database (in months). This setting is configured system-wide.
To configure the length of the password history storage period, perform these steps:
- Go to System > Settings > System Properties in the Core group.
- Find the Password history expiration period (months) property.
- Click Edit and enter the required value in months.
- Click Submit.
Note that if you set the value to 0, a user will be able to reuse an old password after it expires.