Protect Your Users from Credential Stuffing Attacks: Ensure they aren’t using passwords known to be breached

I created a service that website operators can deploy on AWS to check if their users are using passwords known to be breached, comparing them against Troy Hunt’s ihavebeenpwned database of ~600M breached passwords. Read about it out here:

Leave a Reply

Your email address will not be published. Required fields are marked *