Far as I remember, vB used a hash for passwords. But I doubt either one keeps a password history. (Some systems do, like OSes, so members can't reuse the same password.) One does not need a plaintext password to detect duplicate usage, though--comparing the resulting hashes achieves the same purpose.