dp_check_password_pwned

shallow

io.github.privatebydefault/default-privacy · Verify this server

Check whether a password has appeared in known breaches using HIBP k-anonymity. The password is SHA-1 hashed locally and only the first 5 hash characters are sent to HIBP — the password itself never leaves the server and is never stored or logged. Returns whether it was found and how many times.

100.0/100

1 trials · measured 8 days ago

dp_check_password_pwned scores 100.0/100 on Vouch's measured behaviour index, from 1 real invocation trials against io.github.privatebydefault/default-privacy, measured 25 Aug 2026 under methodology v0.2.0. Every measured component scored 100.

Component breakdown

ComponentWeightValue
Reliability35%not applicable
Schema integrity25%100.0
Failure behaviour15%not applicable
Latency15%not applicable
Concurrency10%not applicable

Tool details

Transport
remote
Credential class
self-provisionable
Category
Health
Input schema
not declared
Output schema
not declared
Side-effect classification
unclassified

Score history

DayScoreTierMethodology
2026-08-25100.0shallowv0.2.0

Probe evidence

ProbeOutcomes
schema_integritypass: 1

Raw request/response logs are not archived yet — the outcome counts above are drawn directly from every recorded trial.

Embed this score

Available for every tool, scored or not — not a verification perk. Always links back to this page.

Vouch score: dp_check_password_pwned
[![Vouch score](https://vouch.tools/api/tools/d7b34600-ac19-4ecd-b50b-6c6bd17e718d/badge.svg)](https://vouch.tools/tools/d7b34600-ac19-4ecd-b50b-6c6bd17e718d)
dp_check_password_pwned — Vouch