News for hackers. Stuff that matters.

Show HN: 1Pwned

Posted by peteski22 on Saturday November 15, 2025 @05:17PM
from the show-hn dept.

https://github.com/peteski22/1Pwned

Check all your 1Password logins against Have I Been Pwned's API to figure out which one might be Pwned.

After the Synthient Stealer Log Threat Data Breach (https://synthient.com/blog/the-stealer-log-ecosystem) I realised: you can be in a vulnerable spot if you happen to have a different password for every website, BUT the same email address.

Hopefully this is useful to others who want to be able to find out 'which' login was likely Pwned when they get that alert.

( 3 comments | on HN )
Re:Show HN: 1Pwned by treetalker on Sunday November 16, 2025 @01:04AM (#45943119)
How does this information differ from, and provide more value than, 1Password's built-in Watchtower functionality?
[ Parent | on HN ]
Re:Show HN: 1Pwned by peteski22 on Sunday November 16, 2025 @02:00AM (#45943313)
TBH now that I’ve looked into it … I think it doesn’t really seem different at the moment. I don’t know how I missed this (it was late last night when I made the tool)
[ Parent | on HN ]
Re:Show HN: 1Pwned by peteski22 on Sunday November 16, 2025 @05:00AM (#45943932)
What's weird is that the Watchtowwer in the 1Password desktop app didn't show this, but the mobile app does show 'Vulernable Passwords' which it uses the Have I Been Pwned breach data for. 0_o
[ Parent | on HN ]