the password cannot contains the same sequences of characters as the old password.

That’s a weird way to say “we store your password in plaintext”