u/lukmly013 💾 (lemmy.sdf.org)@lemmy.sdf.org to Lemmy Shitpost@lemmy.worldEnglish · 5 days agoProceeds to append an exclamation marklemmy.imagisphe.reimagemessage-square85linkfedilinkarrow-up1781arrow-down16
arrow-up1775arrow-down1imageProceeds to append an exclamation marklemmy.imagisphe.reu/lukmly013 💾 (lemmy.sdf.org)@lemmy.sdf.org to Lemmy Shitpost@lemmy.worldEnglish · 5 days agomessage-square85linkfedilink
minus-squareikidd@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up5·4 days agoYou don’t send full raw hashes, k-anonymity is a thing. HaveIBeenPwned just takes the first 5 of a hash and sends you back a list that you compare clientside so it never leaves as a usable password.
You don’t send full raw hashes, k-anonymity is a thing. HaveIBeenPwned just takes the first 5 of a hash and sends you back a list that you compare clientside so it never leaves as a usable password.