> 1Password tells you... This is software acting as an agent of the effected user. 1Password could be authorized by the email holder to gain access to the API

> 1Password tells you... This is software acting as an agent of the effected user. 1Password could be authorized by the email holder to gain access to the API without making the information public. > Other websites won't allow you to use... This and the following example in your comment are discussing the breached password API, which is a completely different API that I specifically mentioned up-front as not compromising any PII. I take zero issue with providing an API to see counts of how many times a password has shown up on breach lists, although I wouldn't use the API myself on any of my own passwords, because it leaks a 1-in-1-million discriminator to the actual password you are querying.