Patent ID: 8375425

Claim:
A computer implemented method for password expiration based on vulnerability detection, the computer implemented method comprising: receiving, by a store that stores user entries, a request from a particular user using a client computer for a new password during re-activation of a first user account that belongs to the particular user, wherein the request includes a raw password that was used by a hash function to create an existing password for the particular user, and further wherein the store is external to the client computer; retrieving, from a particular one of the user entries that is associated with the particular user, a particular user-specific salt value, wherein the particular user-specific salt value and the raw password are stored in the store in the particular one of the user entries, and wherein the particular user-specific salt value is specific to the particular user; generating, using a processor unit, a test password using the hash function, wherein the hash function receives the raw password and the particular user-specific salt value as inputs; determining, for each one of a plurality of resources, whether a resource password stored in each one of the plurality of resources matches the test password, and wherein a list of the plurality of resources is stored in the particular one of the user entries; and responsive to determining that the test password matches a particular resource password for a particular one of the plurality of resources, expiring a second account that belongs to the particular user at the particular one of the plurality of resources.