The only proper way to detect this is if you store the last 8 password hashes for example, to check that people aren't cycling.
The only proper way to detect this is if you store the last 8 password hashes for example, to check that people aren't cycling.