Implemented in javascript, can be used to safely verify a password against the Have I Been Pwned API.
This is basically the same implementation as Michael Pound did and showcased on YouTube but done in JS instead of Python so it can run directly in a web browser.
The code is kept minimal and simple to allow reviewing and auditing. The only web request that is made is for the password API using the 5 first characters of the hash generated from the given password.
- Input a password
- Click the check button
- Amount of matches is displayed
If no match is found, good for you, your password is still safe. Otherwise it is strongly recommended to change it asap.