2 ms·
Ah! Thanks a lot, it now makes sense. So at some point HIBP has the unhashed passwords, they obviously don’t make those public, good trick. How do you handle th
by santiagobasulto 3y ago
Ah! Thanks a lot, it now makes sense. So at some point HIBP has the unhashed passwords, they obviously don’t make those public, good trick. How do you handle this from a UX perspective? Just tell the user that password is “not strong enough”?
- aareet 3y agoPassword managers that have HIBP integration are open about it - one says "this password appears in a list of compromised passwords"