search

PhilippC / keepass2android

Password manager app for Android
https://play.google.com/store/apps/details?id=keepass2android.keepass2android
GNU General Public License v3.0
4.69k stars 378 forks source link

[feature request] Provide option to check for breached passwords #403

Open user23498723452 opened 6 years ago

user23498723452 commented 6 years ago

Please consider implementing client support to securely (and optionally) check user passwords for presence in the pwnedpasswords db/api.

https://haveibeenpwned.com/Passwords

There are numerous libraries for this already.

927589452 commented 5 years ago

There is a new API https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/ which can be queried very easy like in this script https://github.com/jamesridgway/pwnedpasswords.sh.git or could this be implemented as a password

927589452 commented 5 years ago

maybe @PhilippC could add which scope he thinks would suit the project better as a core function or as a plugin?

PhilippC commented 5 years ago

I don't have so much time to add new features at the moment, so I personally cannot promise anything regarding this. The KP2A plugin architecture currently does not allow to get a list of all passwords, so the only option is to implement this as a feature in the main app (I would include a pull request if it's well done) or by going through the passwords of an exported unencrypted copy (xml) of the database.