https://github.com/mathiscode/password-leak-monitor
A browser addon that automatically and securely monitors all passwords used and alerts you if it has been included in any data breaches
https://github.com/mathiscode/password-leak-monitor
browser-extension haveibeenpwned password-safety security-tools
Last synced: 7 months ago
JSON representation
A browser addon that automatically and securely monitors all passwords used and alerts you if it has been included in any data breaches
- Host: GitHub
- URL: https://github.com/mathiscode/password-leak-monitor
- Owner: mathiscode
- License: mit
- Created: 2019-05-11T13:55:35.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2022-02-10T18:13:57.000Z (over 3 years ago)
- Last Synced: 2025-02-28T16:10:57.396Z (7 months ago)
- Topics: browser-extension, haveibeenpwned, password-safety, security-tools
- Language: JavaScript
- Homepage:
- Size: 1.57 MB
- Stars: 6
- Watchers: 2
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Security: SECURITY.md
Awesome Lists containing this project
README
# Password Leak Monitor
[](https://github.com/sponsors/mathiscode)
[](https://addons.mozilla.org/en-US/firefox/addon/password-leak-monitor)
[](https://addons.mozilla.org/en-US/firefox/addon/password-leak-monitor)
[](https://addons.mozilla.org/en-US/firefox/addon/password-leak-monitor)
[](https://addons.mozilla.org/en-US/firefox/addon/password-leak-monitor)[](https://travis-ci.org/mathiscode/password-leak-monitor)
[](https://github.com/mathiscode/password-leak-monitor/blob/master/LICENSE)
[](https://standardjs.com)
[](https://github.com/mathiscode/password-leak-monitor/compare)
[](https://twitter.com/intent/tweet?text=Make%20sure%20your%20passwords%20are%20safe&url=https://github.com/mathiscode/password-leak-monitor#readme&hashtags=firefox,chrome,passwords,security)A browser addon that automatically monitors all passwords used and alerts you if it has been included in any data breaches.
### [Download for Firefox](https://addons.mozilla.org/en-US/firefox/addon/password-leak-monitor)
Also check out the [password-leak](https://github.com/mathiscode/password-leak) JavaScript library!
---
## How is this safe?
Your passwords are **NEVER** transmitted to any other system. This addon makes use of the [Have I Been Pwned API](https://haveibeenpwned.com/API/), which implements a [k-Anonymity Model](https://en.wikipedia.org/wiki/K-anonymity) so your password can be checked without ever having to give your password to any other party.
## How does it work?
It's a fairly simple extension: for every password you enter, a call is made to [Have I Been Pwned](https://haveibeenpwned.com/API/v2#PwnedPasswords) with the first five characters of your _hashed_ password. A list of potential matches is returned, and the addon determines if your hashed password matches any of the compromised hashes.