Hacker News Reader

I guess someone somewhere maintains a database of all leaked username passwords and this feature compares a credential with this database? Is that how this works?

View on HN

Possibly, internally at google, we had something similar that would look for passwords found in the wild that you're using for internal google logins

it's probably Have I Been Pwned. Typically this constitutes a big pile of hashes

Reply on news.ycombinator.com