Hacker News Reader

Yes: do a SHA1 of your password (no trailing newline), then fetch https://api.pwnedpasswords.com/range/{first 5 hash chars}. If the full hash appears in the results, the password has been seen in a breach.

Small correction: It's not the full hash that appears in the results, it's the suffix (so the part after the 5 chars you put into the URL).

If you don't want the password to end up in your shell history, this works on in the shell with common tools:

tr -d '\n' | sha1sum

Then type the password you want to look for, hit enter and control-d. You can test with "common" passwords like https://www.reddit.com/r/XFiles/comments/6ge7h4/mulders_home... if you're doing it right.

I wrote an extremely light, dependency free NPM package that also has a CLI version.

https://github.com/moltar/pwnedpasswords

Sure, see: https://haveibeenpwned.com/API/v3#SearchingPwnedPasswordsByR...

if you have bash, awk and sha1sum then you can try this: export PASS=mypassword

then

PT=$(echo -n $PASS | gsha1sum | awk '{print toupper($1)}'); curl -s https://api.pwnedpasswords.com/range/$(awk '{print substr($0,1,5)}' <<< $PT) | grep $(awk '{print substr($0,6)}' <<< $PT)