Have I Been Pwned KeePass Plugin

Simple KeePass plugin which uses the service Have I Been Pwned from Troy Hunt

Your password never leaves KeePass! This is ensured by using a k-Anonymity model when searching with Pwned Passwords.

In order to protect the value of the source password being searched for, Pwned Passwords also implements a k-Anonymity model that allows a password to be searched for by partial hash. This allows the first 5 characters of either a SHA-1 or an NTLM hash (not case-sensitive) to be passed to the API

Changelog

Installation and Updates

Requirements

Windows

• .NET Framework 4.7.2 or higher

Linux

• Mono 5.18 or higher
• On some Linux systems, the mono-complete package may be required for plugins to work properly (Details on keepass.info)

How to install/update

1. Download the latest release (.dll file) from GitHub
2. In KeePass, click 'Tools' → 'Plugins' → button 'Open Folder'
   KeePass now opens a folder called 'Plugins'
3. Exit KeePass to free up the lock on the plugin
4. Move the plugin file into the 'Plugins' folder (replace if exists already)
5. Start KeePass again

Uninstall

1. In KeePass, click 'Tools' → 'Plugins' → button 'Open Folder'
   KeePass now opens a folder called 'Plugins'
2. Exit KeePass to free up the lock on the plugin
3. Delete the plugin file

Some impressions:

• Check all passwords in the opened database
  

• Check all passwords status indicators
  

• Check all passwords result
  

• Show all entries which are pwned
  

• Check the current selected entry
  

• Check the current selected entry result
  

• Toggle the ignore-state of a single entry