3 ms·
Some kind of "prove it's you" function would be great. When you register for notifications it sends out a verification email. That would be a good time to let
by rkagerer 6y ago
Some kind of "prove it's you" function would be great.
When you register for notifications it sends out a verification email. That would be a good time to let you disable public lookup of your email address.
I also wish HIBP could securely disclose the snippet of information from a leak that's relevant to you. Knowing the password or hash characteristics, phone number, etc. could aid in mitigation, and seeing the raw impact might help motivate ordinary users to improve their security hygiene.
Suggested that idea to Troy in the past, and got the impression he's not amenable, largely due to the risks of hosting PII. Can't really blame him.
- unholiness 6y ago> That would be a good time to let you disable public lookup of your email address. https://haveibeenpwned.com/OptOut https://haveibeenpwned.com/OptOut
- pvorb 6y agoThanks, I didn't know there's a way to opt out.
- rkagerer 6y agoThat's helpful, thanks! For anyone else who's hesitant to use the link, these are the three choices presented when you opt out: https://i.imgur.com/4lB2bSq.png https://i.imgur.com/4lB2bSq.png If you pick the first one, you can still use the notification service (https://haveibeenpwned.com/NotifyMe https://haveibeenpwned.com/NotifyMe) to email yourself a private link to check what breaches include the address (past and current).