The password checkup tool is now built into every modern browser. You might want to quickly replace the stolen ones that were stolen.

Troy hunt’s have I been pwned was kind of a novel idea when it first launched 7 years ago. Hunt is now open-sourcing his website codebase so the idea can spread further further.

Many of the password checkup tools are based on the same’k-anonymity’ tool that was originally designed to support have I been pwned’s tool.

@ LastPass has added breached password notifications using the k-anonymity API design by me and @ troyhunt. Joining @ 1Password, Okta passprotect, Apple, Google, etc.

k-anonymity uses math to make it harder for hackers to figure out which passwords are and make the breach even worse. You want to be able to tell users that their password has been breached.

Hunt said last year that he does n’t want to continue this all by himself. He’s now going to try to open it all up for the community to contribute.