Quote from: hatshepsut93 on October 05, 2019, 02:42:45 PM

Quote from: PrimeNumber7 on October 05, 2019, 07:25:09 AM

The last I checked, haveibeenpwned actually will only ask the end user to input the username/email and they will respond with any accounts associated with databases that have been compromised containing that email address or username.

https://haveibeenpwned.com/Passwords

This is a separate feature from their email watching service, it also notifies people if their password was leaked, but you only send them a small part (called suffix) at the start of the hash of your password, and they return all the hashes from their database that also start with the same suffix, and then the code on client's side looks if any of the hashes matches the original hash.

By the way, haveibeenpwned accepts Bitcoin donations, which is a good example of Bitcoin's adoption and real use.

You shouldnt be reusing passwords anyway, so there shouldnt be any value to use that service. The same is true for even part of your password.

If you are using something very close to a random password, having one compromised should not affect your security on any other site and you can search by username to check if a database has been compromised