{"repo":"lionheart/pwnedpasswords","free":true,"listed":false,"github":"https://github.com/lionheart/pwnedpasswords","clone":"git clone https://github.com/lionheart/pwnedpasswords.git","description":"A Python Library and CLI for the Pwned Passwords v2 API","language":"Python","stars":51,"topics":["python","passwords","security","command-line","cli"],"license":"Apache-2.0","category":"cli-tools","readme_excerpt":"[ ][lionheart-url] [![Version][version-badge]][pypi-url] [![Python Versions][versions-badge]][pypi-url] pwnedpasswords is a small Python wrapper and command line utility that lets you check if a passphrase has been pwned using the Pwned Passwords v2 API. All provided password data is [k-anonymized][k-anonymous-url] before sending to the API, so plaintext passwords never leave your computer. From https://haveibeenpwned.com/API/v2#PwnedPasswords: Pwned Passwords are more than half a billion passwords which have previously been exposed in data breaches. The service is detailed in the launch blog post then further expanded on with the release of version 2. The entire data set is both downloadable and searchable online via the Pwned Passwords page. Installation pwnedpasswords is available for download through [PyPi][pypi-url]. You can install it right away using pip. Usage Security Note No plaintext passwords ever leave your machine using pwnedpasswords. How does that work? Well, the Pwned Passwords v2 API has a pretty cool [k-anonymity][k-anonymous-url] implementation. From https://blog.cloudflare.com/validating-leaked-passwords-with-k-anonymity/: Formally, a data set can be said to hold the property of k-anonymity, if for every record in a released table, there are k − 1 other records identical to it. This allows us to only provide the first 5 characters of the SHA-1 hash of the password in question. The API then responds with a list of SHA-1 hash suffixes with that prefix. On a","default_branch":null,"files":null,"tree":[],"storefront":"/r/lionheart","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/lionheart/pwnedpasswords/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}