"Pwned Passwords" that you can check whether your password is dangerous in the past leaked data for free

It is thought that it is important that you never use "passwords" that are set to protect accounts when using services on the Internet. Although there is a danger that you will be hijacked accounts in a crowd that is sweet by the use of passwords, "Pwned Passwords"Will determine if the password you are using is the same as the one that was misused by previous data breach.

Have I been pwned? Pwned Passwords
https://haveibeenpwned.com/Passwords

Microsoft's security technician Troy Hunt released a service "Have I been pwned? (HIBP)" that checks whether his mail address leaked in some form or not before.

"Have I been pwned?" To see if it was hacked and entered the past spill list when searching by your own mail address or ID name - "GIGAZINE


Mr. Hunt also released a password version "Pwned Passwords (V1)" for leakage check as subcontent of HIBP. In V1 leaked password isApproximately 300 million listed upAlthough it was done, it updated to Pwned Passwords V2 in February 2018, and the list of passwords exceeded 5 billion passwords. It seems that it is preferable to change your password as soon as there is a possibility that you may be victimized if you use a password that leaked in some form.

That way, the way to check the password leak condition with Pwned Passwords is as follows.

Have I been pwned? Pwned Passwords
https://haveibeenpwned.com/Passwords


Enter the password you want to check on the text form on the above site and click "pwned?".


If "Good news - no pwnage found!" Is displayed, it is not on the spill list.


When "Oh no - pwned!" Is displayed, there is a leak history. I should change my password immediately. In addition, V2 seems to be showing how many times it appears in the leakage list, and Mr. Hunt said that a password that appears more than 100 times should be forcibly changed to another password It is.


By the way, I ran the top for many years in the worst password ranking "123456"I found that it hits over 20 million times in the history.


Mr. Hunt explains the improvement in Pwned Passwords V2 in detail in the following blog. The list of password data can also be downloaded as a torrent file.

Troy Hunt: I've Just Launched "Pwned Passwords" V2 With Half a Billion Passwords for Download
https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/