3 ms·

If I test my passwords, aren't they also now pwned?

• Mithorium 9y ago
  In a word: Yes
• stephengillie 9y ago
  Not if you grep locally. How big is this data set? It can't be much bigger than a AAA video game download.
  • ocdtrekkie 9y ago
    It's 11.9 GB of text (5.3 GB zipped). So smaller than quite a few video game downloads.
    • sleepybrett 9y ago
      fairly low compression rate for zipped ascii, but i guess it is mostly a giant pile of nearly random strings.
• edelans 9y ago
  test the SHA1 of your passwords, not your passwords, and you are safe.
  • rocqua 9y ago
    A weak password can still be cracked given the sha1 hash and a dictionary.
    • thephyber 9y ago
      If you the type of person to read the article, you aren't likely to submit a basic dictionary password. Either your passwords have more entropy or you know better than to submit them.