little-pwny 0.1

Check whether your password has been pwnd

Check whether a password has been compromised

Query the have-i-been-pwned database for breaches that contain a given password. Returns the number of breaches found in the database:

$ pwny p@ssw0rd
51763

$ pwny aiPh1eehec8AhY2y
0

At no time the raw password is transferred to https://haveibeenpwned.com. Instead we use the generously offered API to deploy k-anonymity. I.e. we send the first five chars of the SHA1 hash of any given password. This way you can check new passwords without revealing them to the server (or any listening party).

little-pwny requires no additional packages, but it does not run on Python 2.x.

Install

with pip

Simply:

$ pip install little-pwny

From Source

Clone the source:

$ git clone https://github.com/ulif/little-pwny
$ cd little-pwny

Create and activate a virtualenv:

$ virtualenv env
$ source ./env/bin/activate.sh

Then, from this directory, install the package:

[venv] $ pip install -e .

Running Tests

We use tox and py.test for testing. So,:

$ pip install tox
$ tox

should run all tests.