---
title: "Password Breach Checker"
method: POST
path: "/v1/passwordbreach"
tags: ["Security"]
---

# Password Breach Checker

`POST /v1/passwordbreach`

## Request

- Base URL: `https://api.apiverve.com`
- URL: `https://api.apiverve.com/v1/passwordbreach`
- Auth: API key in header `x-api-key`

Check whether a password or its SHA-1 hash appears in known data breaches

## Request body

- object
  - `password` string: The password to check. Hashed on receipt and never stored. Send this or hash
  - `hash` string: The 40-character hex SHA-1 of the password, instead of the password itself

## Response `200`

Successful Response

- object
  - `status` string: status
  - `error` string: error
  - `data` object: data

## Other responses

- `401`: Your request was not authorized, or your API Key was invalid
- `404`: Requested resource was not found
- `500`: A server error has occurred, try again later

---

[API](https://skmtc.dev/apiverve/apis/apiverve-api.md) · [All operations](https://skmtc.dev/apiverve/apis/apiverve-api/llms.txt) · [OpenAPI document](https://skmtc.dev/apiverve/apis/apiverve-api/revisions/4b9a77598eb4?raw)