A lot of users, myself included, increment the last digits of a password when it is required to be changed on a regular basis - e.g. 30/60/90 days.
Regardless of whether forced password changes are an effective security control, is there not a way to identify similar passwords and prevent them being set; and if there is a way, why is it not routinely employed?
Consider the new password (plain text) and the hash of the current password
Identify any digits at the beginning or end of the new password and sequentially generate 100 variations (e.g. Password55 -> Password54,Password53 etc,Password56,Password57 etc.) to identify common increments.
If any of the resulting hashes match the current hash, deny the password change on the basis it is too similar to the existing password.
This feature doesn't appear to be an available setting in Windows (at least) and I'm curious to understand why.