Comment by setzer22

> my old password was no longer permitted.

But how did they know? They should just have the hash...