divineomega/password_exposed

This PHP package provides a `password_exposed` helper function, that uses the haveibeenpwned.com API to check if a password has been exposed in a data breach.

🔒 Password Exposed Helper Function

This PHP package provides a password_exposed helper function, that uses the haveibeenpwned.com API to check if a password has been exposed in a data breach., _(*1)

, _(*2)

, _(*3)

Installation

The password_exposed package can be easily installed using Composer. Just run the following command from the root of your project., _(*4)

composer require "divineomega/password_exposed"

If you have never used the Composer dependency manager before, head to the Composer website for more information on how to get started., _(*5)

Usage

To check if a password has been exposed in a data breach, just pass it to the password_exposed method., _(*6)

Here is a basic usage example:, _(*7)

switch(password_exposed('hunter2')) {

    case PasswordStatus::EXPOSED:
        // Password has been exposed in a data breach.
        break;

    case PasswordStatus::NOT_EXPOSED:
        // Password has not been exposed in a known data breach.
        break;

    case PasswordStatus::UNKNOWN:
        // Unable to check password due to an API error.
        break;
}

If you prefer to avoid using helper functions, the following syntax is also available., _(*8)

$passwordStatus = (new PasswordExposedChecker())->passwordExposed($password);

SHA1 Hash

You can also supply the SHA1 hash instead of the plain text password, by using the following method., _(*9)

$passwordStatus = (new PasswordExposedChecker())->passwordExposedByHash($hash);

or..., _(*10)

$passwordStatus = password_exposed_by_hash($hash);