Data security utilizing historical password data
Aspects of the present invention disclose a method, computer program product, and system for performing a validation of authentication credentials from a user. The method includes one or more processors receiving authentication credentials input in an authentication session, the authentication credentials including a username and a password. The method further includes one or more processors generating a hash of the password of the received authentication credentials. In response to determining that the received authentication credentials are not valid, the method further includes one or more processors determining whether the generated hash of the password matches a stored hash associated with the username of the received authentication credentials.
1. A method comprising:
generating, by one or more processors, a list of authorized password hashes for a respective username by:
identifying, by one or more processors, a first password included in a first failed login attempt of a first authentication session, wherein the first authentication session includes a successful login attempt subsequent to the first login attempt;
generating, by one or more processors, a hash of the first password of the first failed login attempt; and
adding, by one or more processors, the generated hash of the first password to the list of authorized password hashes;
receiving, by one or more processors, authentication credentials input in an authentication session, the authentication credentials including a username and a password;
generating, by one or more processors, a hash of the password of the received authentication credentials; and
in response to determining that the received authentication credentials are not valid, determining, by one or more processors, whether the list of authorized password hashes includes the generated hash of the password associated with the username of the received authentication credentials.
2. The method of claim 1 , further comprising:
in response to determining that the list of authorized password hashes includes the generated hash of the password associated with the username, presenting, by one or more processors, an authentication interface in the authentication session without incrementing a failed login count of the authentication session.
3. The method of claim 1 , further comprising:
in response to determining that the list of authorized password hashes does not include the generated hash of the password associated with the username, incrementing, by one or more processors, a failed login count of the authentication session.
4. The method of claim 1 , wherein the list of authorized password hashes is stored in a blockchain enabled immutable ledger.
5. The method of claim 1 ,
wherein the list of authorized password hashes additionally indicates authorized password hashes corresponding to a computing device identifier.
6. A computer program product comprising:
one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising:
program instructions to generate a list of authorized password hashes for a respective username by:
identifying a first password included in a first failed login attempt of a first authentication session, wherein the first authentication session includes a successful login attempt subsequent to the first login attempt;
generating a hash of the first password if the first failed login attempt; and
adding the generated hash of the first password to the list of authorized password hashes;
program instructions to receive authentication credentials input in an authentication session, the authentication credentials including a username and a password;
program instructions to generate a hash of the password of the received authentication credentials; and
in response to determining that the received authentication credentials are not valid, program instructions to determine whether the list of authorized password hashes includes the generated hash of the password associated with the username of the received authentication credentials.
7. The computer program product of claim 6 , further comprising program instructions, stored on the one or more computer readable storage media, to:
in response to determining that the list of authorized password hashes includes the generated hash of the password associated with the username, present an authentication interface in the authentication session without incrementing a failed login count of the authentication session.
8. The computer program product of claim 6 , further comprising program instructions, stored on the one or more computer readable storage media, to:
in response to determining that the list of authorized password hashes does not include the generated hash of the password associated with the username, increment a failed login count of the authentication session.
9. The computer program product of claim 6 , wherein the list of authorized password hashes is stored in a blockchain enabled immutable ledger.
10. A computer system comprising:
one or more computer processors;
one or more computer readable storage media; and
program instructions stored on the computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising:
program instructions to generate a list of authorized password hashes for a respective username by:
identifying a first password included in a first failed login attempt of a first authentication session, wherein the first authentication session includes a successful login attempt subsequent to the first login attempt;
generating a hash of the first password if the first failed login attempt; and
adding the generated hash of the first password to the list of authorized password hashes;
program instructions to receive authentication credentials input in an authentication session, the authentication credentials including a username and a password;
program instructions to generate a hash of the password of the received authentication credentials; and
in response to determining that the received authentication credentials are not valid, program instructions to determine whether the list of authorized password hashes includes the generated hash of the password associated with the username of the received authentication credentials.
11. The computer system of claim 10 , further comprising program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, to:
in response to determining that the list of authorized password hashes includes the generated hash of the password associated with the username, present an authentication interface in the authentication session without incrementing a failed login count of the authentication session.
12. The computer system of claim 10 , further comprising program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, to:
in response to determining that the list of authorized password hashes does not include the generated hash of the password associated with the username, increment a failed login count of the authentication session.
13. The computer system of claim 10 , wherein the generated list of authorized password hashes is stored in a blockchain enabled immutable ledger.
14. The computer system of claim 10 ,
wherein the list of authorized password hashes additionally indicates authorized password hashes corresponding to a computing device identifier.