password_check
Verify if a password's SHA-1 hash appears in Have I Been Pwned breach data using k-anonymity — only first 5 characters are sent, preserving privacy.
Instructions
Check if SHA-1 hash appears in Have I Been Pwned (HIBP) breach dataset using k-anonymity (5-char prefix only, full hash never leaves tool). Use for password breach audits; read-only, no data stored. Companion OSINT investigation tools: hash_lookup (file-hash malware family lookup, different namespace), email_disposable (throwaway-mail signal on associated accounts), username_lookup (social-platform exposure on associated handles). Free: 100/hr, Pro: 1000/hr. Returns {found, count}.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| sha1_hash | Yes | Full SHA-1 hash of the password as 40 lowercase hexadecimal characters (e.g. '5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8' for 'password') |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |