Fine until you run into the filter that prevents the new password from having any of the same substrings longer than some limit compared to the old one.