4 ms·
I've always felt nervous entering my info, to do a look up. It's yet another data trail to elevate certain set of stolen data above the noise of unused/throw a
by jordache 6y ago
I've always felt nervous entering my info, to do a look up. It's yet another data trail to elevate certain set of stolen data above the noise of unused/throw away/dead accounts.
- NobodyNada 6y agoPwned Passwords uses a k-anonymity scheme so that your password is never actually sent to the server [0]. You can just call the API directly [1] so that you don’t have to trust haveibeenpwned.com’s JavaScript with your password. [0]: https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2#cloudflareprivacyandkanonymity https://www.troyhunt.com/ive-just-launched-pwned-passwords-v... [1]: https://haveibeenpwned.com/API/v3#PwnedPasswords https://haveibeenpwned.com/API/v3#PwnedPasswords
- tsbinz 6y agoAnd if you are really paranoid, you can just download the whole set of hashes and do the lookup yourself.