search

pixelfed / ideas

Issues board used for Pixelfed suggestions
8 stars 1 forks source link

Add optional pwnedpasswords.com support to prevent passwords used in data breaches #1

Open dansup opened 6 years ago

dansup commented 6 years ago

It would be trivial to implement the API to check against passwords used in data breaches in javascript for the registration page.

API Docs: https://haveibeenpwned.com/API/v2#SearchingPwnedPasswordsByRange

veb commented 6 years ago

Fantastic idea. 👍 +1

rugk commented 6 years ago

:+1:

It should just send the first chars of the hash, so it is totally fine to do that and it does not reveal your password.

iamdoubz commented 4 years ago

Just want to drop a comment here for this. More or less leaving a link to how Nextcloud implemented to be used for future implementation.

Thanks for all your hard work.