Module hibp

Source
Expand description

Have I Been Pwned (HIBP) API client for password breach checking.

This module implements k-anonymity based password checking against the HIBP API.

Constantsยง

HIBP_DEFAULT_BASE_URL ๐Ÿ”’
Default base URL for the Have I Been Pwned (HIBP) Pwned Passwords API.

Functionsยง

check_password_exposed ๐Ÿ”’
Check password exposure via HIBP API using k-anonymity model.
hash_password_for_hibp ๐Ÿ”’
Hash password with SHA-1 and split into prefix/suffix for k-anonymity.
parse_hibp_response ๐Ÿ”’
Parse HIBP API response to find password hash and return breach count.