https://github.com/jamesridgway/pass-pwned

pass-pwned is a Password Store extension for checking passwords against the pwnedpasswords API
https://github.com/jamesridgway/pass-pwned

Last synced: 8 days ago
JSON representation

pass-pwned is a Password Store extension for checking passwords against the pwnedpasswords API

• Host: GitHub
• URL: https://github.com/jamesridgway/pass-pwned
• Owner: jamesridgway
• License: mit
• Created: 2018-03-02T03:02:42.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2019-01-20T09:37:40.000Z (almost 6 years ago)
• Last Synced: 2024-08-03T02:02:46.828Z (3 months ago)
• Language: Shell
• Size: 60.5 KB
• Stars: 4
• Watchers: 4
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: license.md

Awesome Lists containing this project

• awesome-password-store - pass-pwned - Store extension for Have I Been Pwned? Pwned Passwords v2 API or an offline password hash file of your choosing. (Extensions / Auditing)

README

        
# pass-pwned

[![Build Status](https://travis-ci.org/jamesridgway/pass-pwned.svg?branch=master)](https://travis-ci.org/jamesridgway/pass-pwned)

A [pass](https://www.passwordstore.org/) extension for checking passwords against [pwnedpasswords](https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/) API.

This extension supports checking individual passwords or all passwords against the API.

If you're concerned about using the API, you can provide a password hash file to use instead via the `-f` or `--file` option.

## Usage

```

pass pwned is a Password Store extension for checking passwords against the pwnedpasswords API.

  Usage:

    pass pwned check [-f ] [pass-name]

        Check the contents of pass-name against pwnedpasswords API. For a multiline

        passfile only the first line will be checked.

        Using the -f or --file flag will use the provided password hash file

        instead of the pwnedpasswords API.

        If you want to check all of your password store entries, don't provide a

        pass-name.

  Options:

    -f, --file    Provide a sorted password hash file to use instead of the API.

More information may be found in the pass-pwned(1) man page.

```

### Password Hash Files

Password hash fils must be sorted by the hash, this is to allow an efficient lookup using [bsearch](https://www.james-ridgway.co.uk/projects/bsearch).

Hash files should be structured as follows, with a colon (`:`) separating the hash from count.

```

21BD10E37C7AE489C68833760870331191440428:4

21BD10E517DD1DBBEBB24B31D69EFCD9AA3565D5:15

21BD10F212CF1B355E4F388728F61E0C6DE227B8:5

...

```

## Installation

### Manual

```

git clone https://github.com/jamesridgway/pass-pwned.git

cd pass-pwned

make install

```