Package: wnpp
X-Debbugs-Cc: [email protected]
Owner: David Steele <[email protected]>
X-Debbugs-Cc: [email protected]
Severity: wishlist

* Package name    : pwndck
  Version         : 0.1
  Upstream Contact: David Steele <[email protected]>
* URL             : https://github.com/davesteele/pwndck
* License         : GPL-2+
  Programming Lang: Python
  Description     : Check a password against the HaveIBeenPwned database

Pwned Check

Evaluate a password against the HaveIBeenPwned password database, and return
the number of accounts for which it has been reported as compromised.

See https://haveibeenpwned.com/API/v3#PwnedPasswords

I developed this for my own use.

There are other packages that work with HIBP, but all I found were much more
heavyweight (e.g. download the database for local use).

Commercial services that purport to monitor the dark web for you, reporting on
password breaches against your email address, can be particularly useless.
They'll tell you there is a leak of your password, but won't say for which
site, or for which password. HIBP offers a way to determine if a particular
password is bad. This utility enhances the security of the process, ensuring
that the queried password is not exposed beyond the local machine.

I plan on maintaining this myself, though I invite supporters and co-
maintainers.


Attachment: OpenPGP_0x8A3171EF366150CE.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to