https://github.com/findus23/plugin-passwordverifier

https://github.com/findus23/plugin-passwordverifier

matomo matomo-plugin

Last synced: about 1 year ago
JSON representation

• Host: GitHub
• URL: https://github.com/findus23/plugin-passwordverifier
• Owner: Findus23
• License: gpl-3.0
• Created: 2018-11-06T13:22:05.000Z (over 7 years ago)
• Default Branch: 5.x-dev
• Last Pushed: 2024-08-17T11:09:45.000Z (almost 2 years ago)
• Last Synced: 2025-04-11T02:11:32.394Z (about 1 year ago)
• Topics: matomo, matomo-plugin
• Language: PHP
• Homepage: https://plugins.matomo.org/PasswordVerifier
• Size: 73.2 KB
• Stars: 3
• Watchers: 2
• Forks: 3
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Matomo PasswordVerifier Plugin

[![Translation status](https://hosted.weblate.org/widgets/matomo/-/communityplugin-passwordverifier/svg-badge.svg)](https://hosted.weblate.org/projects/matomo/communityplugin-passwordverifier/)

## Description

This plugin sends the first 5 characters of the SHA1 hash of the password to the [haveibeenpwned.com database](https://haveibeenpwned.com/Passwords) of over 500 million passwords exposed in data breaches. If the password is found, Matomo rejects it and asks the user to use a more secure password.

This plugin only acts on passwords changes and can't access existing passwords as they are stored securely hashed by Matomo.

### Disclaimer

**Attention**: This is a beta plugin. Please don't use it in security critical environments without checking the correctness of [the source](https://github.com/Findus23/plugin-PasswordVerifier/blob/master/PasswordVerifier.php) yourself.