What it does is request a block of hashes from the server with a given 5-hex-digit prefix (ie, 20 bits). Then inside the browser it scans the block for the exac

What it does is request a block of hashes from the server with a given 5-hex-digit prefix (ie, 20 bits). Then inside the browser it scans the block for the exact hash. Code at https://github.com/OktaSecurityLabs/passprotect-js/blob/master/src/index.js#L206 https://github.com/OktaSecurityLabs/passprotect-js/blob/mast...