Business Central NavUserPassword allow same password for Current Password and New Password

(1) Share

Report

Posted on by CU27070549-1

Hi everyone, does anyone know why Microsoft Business Central Credential Type: NavUserPassword is allowing the use of the same password during the password reset procedure?
I tried different versions from 26 to 28; the issue/system behavior is quite consistent. Just wondering what the reason is Microsoft doesn't enforce a password uniqueness policy for the current password vs. the new password.

I do appreciate anyone knowing the issue who can provide input or direct me to any Microsoft official documentation for the official statement.

As I checked from the code, it's coded with "ValidateNewPasswordUniqueness," but it's just unknown what the reason is that it doesn't fire the event or if it's an intended behavior.

Categories:

Dynamics 365 Business Central

I have the same question (0)

All responses (1)

Answers (0)

Suggested answer

OussamaSabbouh 18,530 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hello,
I could not find any official Microsoft statement confirming that reusing the same NavUserPassword is allowed by design. Microsoft documents that the password-change dialog compares against the CurrentPassword supplied by the calling process, so this behaviour suggests that the NavUserPassword reset flow is not passing/using that value correctly, or it is a product defect rather than a documented password policy. Since you reproduced it in versions 26–28, I recommend raising a Microsoft support case; Microsoft also recommends using Entra ID or Windows authentication instead of NavUserPassword.
Regards,
Oussama Sabbouh

1 people found this reply helpful.

Was this reply helpful? Yes No