little-pwny 0.1

Check whether a password has been compromised

Query the have-i-been-pwned database for breaches that contain a given password. Returns the number of breaches found in the database:

$ pwny p@ssw0rd
51763

$ pwny aiPh1eehec8AhY2y
0

At no time the raw password is transferred to https://haveibeenpwned.com. Instead we use the generously offered API to deploy k-anonymity. I.e. we send the first five chars of the SHA1 hash of any given password. This way you can check new passwords without revealing them to the server (or any listening party).

little-pwny requires no additional packages, but it does not run on Python 2.x.

$ pip install little-pwny

$ git clone https://github.com/ulif/little-pwny
$ cd little-pwny

$ virtualenv env
$ source ./env/bin/activate.sh

[venv] $ pip install -e .

$ pip install tox
$ tox