pwned-check

Simple tool that checks if your password have been pwned via the haveibeenpwned.com API.
It hashes your password locally and sends the first 5 characters (k-anonymity) of the hash to the server. Afterwards, the list obtained from the server is locally searched for matches.

Usage

Usage of pwned-check:
  -hash
    	SHA1 hash as input
  -p string
    	Password to check

Examples

pwned-check -p foobar

pwned-check < password.txt

echo -n "foobar" | sha1sum | cut -d " " -f1 | pwned-check -hash