have i been pwned? VS KeePassXC

have i been pwned? Reviews

KeePassXC Reviews

have i been pwned? mentions (3670)

• Protecting your email address via SVG instead of JavaScript

  Does her email show up on any leaks on https://haveibeenpwned.com/ ? I'm wondering if not publishing it would have made any difference to receiving phishing messages. - Source: Hacker News / 3 days ago

• Protecting your email address via SVG instead of JavaScript

  > in hacked datadumps https://haveibeenpwned.com/ 45 data breaches and 7 pastes Wow, I don't know if I've ever seen a real address in so many breaches haha. - Source: Hacker News / 3 days ago

• Password Management: The Basics

  HIBP provides a free service to check if a user's password has been compromised in a data breach. The HIBP API can be integrated into the sign-in or password update services to notify users that the password has been compromised. Ideally, when updating a password with a known compromised password, the service would block that password from being used with helpful information. HIBP doesn't publish the companies... - Source: dev.to / 14 days ago

• AT&T Says Personal Information from 73M Customers Leaked on the Dark Web

  This is a great site for checking current and monitoring future breaches: https://haveibeenpwned.com/. - Source: Hacker News / about 2 months ago

• The Alleged AT&T Data Breach

  I've been with AT&T since they merged with Cingular in 2006, and according to https://haveibeenpwned.com/ I'm not included in this dump. - Source: Hacker News / about 2 months ago

KeePassXC mentions (232)

• TOTP Codes in the Terminal

  KeePassXC[1] password manager supports TOTP and I use it for that purpose in addition to storing passwords. It never made sense to me to use an app like Authy. [1] . - Source: Hacker News / 3 months ago

• Ask HN: Best Password Manager without cloud login?

  If you use KeePass, make sure you use the KeePassXC variant. KeePass is dead. https://keepassxc.org/. - Source: Hacker News / 4 months ago

• Help a noob out, please.

  For the internet, use a password manager like keepassxc with a strong password. Source: 5 months ago

• Google-hosted malvertising leads to fake Keepass site that looks genuine

  When you're at a point where you're relying on a display name to make security-critical decisions, you've already lost. Character substitutions like ķeepass or ƙeepass or keypass are at least possible to spot if you know the name of the product, but not the full URL. But there are many ways to create lookalike domains that don't change the product name: https://keepass.org https://keepass.net https://keepass.info... - Source: Hacker News / 7 months ago

• Google announces passwordless by default: Make the switch to passkeys

  > People love to hate on passwords but the reality is that for many circumstances (threat models) they are the best compromise. You can make them more than strong enough (take 32+ bytes out of /dev/random and encode however you like, nobody will ever brute force that in this universe) and various passwords managers solve the problem of re-use (never reuse a password). > And it comes with the benefit that you... - Source: Hacker News / 7 months ago