11 / THE TOOL AT WORK
How is the password checked without sending it?
The password is hashed locally with SHA-1, only the first five hash characters are sent, and matching happens inside the site.
01The password is never stored.
02Send a small anonymous hash prefix.
03Match the remaining hash locally and show the count.
Password Breach Checker
Check whether a password appeared in known breaches using a privacy-preserving method; the full password is never sent.
