diff --git a/src/Password/Rule.php b/src/Password/Rule.php
index <HASH>..<HASH> 100644
--- a/src/Password/Rule.php
+++ b/src/Password/Rule.php
@@ -394,9 +394,10 @@ class Rule extends Relational
 	 * @param   array   $rules
 	 * @param   mixed   $user
 	 * @param   string  $name
+	 * @param   bool    $isNew
 	 * @return  array
 	 */
-	public static function verify($password, $rules, $user, $name=null)
+	public static function verify($password, $rules, $user, $name=null, $isNew=true)
 	{
 		if (empty($rules))
 		{
@@ -581,7 +582,7 @@ class Rule extends Relational
 				$current = Password::getInstance($user);
 
 				// [HUBZERO][#10274] Check the current password too
-				if (Password::passwordMatches($user, $password, true))
+				if ($isNew && Password::passwordMatches($user, $password, true))
 				{
 					$fail[] = $rule['failuremsg'];
 				}
Adding flag to indicate is an existing or new password is being rule checked (#<I>)