HaveIBeenPwned/PwnedPasswordsDownloader

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1289 stars · 147 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A .NET global tool that downloads the complete Pwned Passwords SHA1 and NTLM hash ranges for offline use, removing the need to query the k-anonymity API at runtime. It supports single-file or per-range directory output, MD5 content verification, retries, and incremental updates via ETag-based indexes.

Use cases

• download all pwned passwords hashes for offline use
• mirror the have i been pwned password corpus locally
• run password breach checks without calling the k-anonymity API
• download NTLM hash ranges instead of SHA1
• incrementally update a local pwned passwords dataset
• self-host password breach checking for my service

When to choose

• you need to validate passwords offline or at high volume without API rate limits
• you want to self-host a pwned password lookup service
• you need NTLM as well as SHA1 hash data

When to avoid

• you only check occasional passwords and the free k-anonymity API is sufficient
• you cannot spare several gigabytes of local storage for the hash ranges

Facets

cli-tool · maturity active

cli security http-client file-system security privacy developer-tools windows cross-platform cli dotnet haveibeenpwned pwned-passwords password-hashes offline-dataset sha1 ntlm k-anonymity data-download passwords command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="HaveIBeenPwned/PwnedPasswordsDownloader")