Pwned Passwords

• Check a passwordCheck whether a password has appeared in a known data breach, and how many times. Use it to turn away a breached password at sign-up or reset. The password is never sent anywhere or repeated in the result.
• Check several passwordsCheck up to 1,000 passwords at once, such as an export of accounts, and find the breached ones. Each is reported by its position and account, never by the password itself, and blank rows are skipped rather than stopping the step.
• Check a password hashCheck whether a SHA-1 or NTLM password hash belongs to a breached password, without ever knowing the password. The kind of hash is worked out from its length.
• Check several password hashesAudit up to 1,000 SHA-1 or NTLM hashes at once, such as an Active Directory hash dump, and find the accounts whose passwords have been breached. Hash dump lines and account:hash lines are read as they are.

No actions match that.