---
title: "Check if password has been pwned"
method: POST
path: "/password-strength/pwned"
tags: ["Password"]
---

# Check if password has been pwned

`POST /password-strength/pwned`

## Request

- Base URL: `https://abundanceapis.com`
- URL: `https://abundanceapis.com/password-strength/pwned`
- Auth: none declared

Uses HIBP k-anonymity API to check password exposure.

## Request body

- object
  - `password` string, required: The password to check against the HIBP breach corpus. Only a 5-char SHA-1 prefix leaves the server (k-anonymity).

## Other responses

- `400`: Bad request

---

[API](https://skmtc.dev/abundanceapis/apis/web-toolbox.md) · [All operations](https://skmtc.dev/abundanceapis/apis/web-toolbox/llms.txt) · [OpenAPI document](https://skmtc.dev/abundanceapis/apis/web-toolbox/revisions/ada2893fef43?raw)