All projects

008 / 011

Password Checker

An API to check if the password has not been leaked

  • Have I Been Pwned API
  • SHA-1
  • k-Anonymity

This program uses an API to check if passwords have been compromised using the 'Have I been Pwned' service. In order to protect the password being searched for, Pwned Passwords API implements a k-Anonymity model that allows a password to be searched for by partial hash. This allows the first 5 characters of either an SHA-1 or an NTLM hash (not case-sensitive) to be passed to the API, making it safe to use.