How can anyone know that “new password too similar to old password” if hashed? (howtogeek.com)