Is this password in a breach?

Frammenti di codice

curl "https://api.oanor.com/pwned-api/v1/check" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/pwned-api/v1/check", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/pwned-api/v1/check");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/pwned-api/v1/check",
    headers={"x-oanor-key": "oanor_test_..."}
)

Risposta di esempio

Una risposta reale di questo endpoint, acquisita dall'ultimo health check.

{
    "data": {
        "sha1": "5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8",
        "pwned": true,
        "advice": "This password has appeared in known data breaches — do not use it.",
        "breach_count": 52256179
    },
    "meta": {
        "timestamp": "2026-06-01T16:22:52.087Z",
        "request_id": "60624ae4-b0bd-4577-8ffd-7dc64d3422df"
    },
    "status": "ok",
    "message": "Password checked",
    "success": true
}