5 ms·
Honest question, how does somebody know whether a dumped hashed/"encrypted" password has actually been broken and exists in plaintext? Some time ago I reset al
by matt_wulfeck 10y ago
Honest question, how does somebody know whether a dumped hashed/"encrypted" password has actually been broken and exists in plaintext?
Some time ago I reset almost all my passwords to 1passwd $RAND, but some of these dumps are ooooold. Is there a legit way to find what's available for my email?
- pellej_s 10y agoThere are some efforts, like https://haveibeenpwned.com/ https://haveibeenpwned.com/. However, personally? I always feel naked dishing out my email(s) in a <form>... Irregardless of HTTPS or HTTP.
- deleted 10y ago[deleted]
- afreak 10y agoThere are several services (including one run by me). https://canar.io https://canar.io (mine) https://haveibeenpwned.com/ https://haveibeenpwned.com/ Mine lets you free-form search whereas HaveIBeenPwned is there for searching just e-mail addresses.
- hodwik2 10y agoYours is fun, in that it's more free-form, but HIBP seems to cover more ground.