checker

func Pwned ¶

func Pwned(pwd string) (bool, string, error)

Pwned calls the pwnedpasswords API to determine if a supplied password is in the database of leaked passwords (true). The supplied password is NOT being sent to the pwnedpasswords API; instead only the SHA1 prefix (5 first hash char) is sent, this ensures that the pwnedpasswords API doesn't know the password that is being sent (it is protected in k-anonymity guarantee). Refer to https://haveibeenpwned.com/API/v3#PwnedPasswords for more details.