6 ms·
Regardless of the partnering - why would you ever put in your passwords into a public website like this?
by iammyIP 9y ago
Regardless of the partnering - why would you ever put in your passwords into a public website like this?
- deleted 9y ago[deleted]
- fwip 9y agoI recommend you read the section "Consuming the API (and the Mechanics Behind the Range Search)" of https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/ https://www.troyhunt.com/ive-just-launched-pwned-passwords-v... - it explains how you can search for your password with the API without letting the service know what your password is.
- mrunkel 9y agoWell, what good is the password by itself? If you don’t know where it’s been used and with what username, it hasn’t mich value. In any case, you can use his V2 API to check your password without sending the password or even the complete hash. You can check out my little go script which does this here: https://github.com/mrunkel/checkpass https://github.com/mrunkel/checkpass