Skip to content

Search

← Customer feedback for Have I Been Pwned
(thinking…)
Reset
  • All (126)
  • Articles (0)
  • Ideas (126)

    1. You are compromising the security of the people  ·  declined

    2. Include actual API name of breach...

    3. Add sprashivai.ru breach  ·  completed

    4. Mark ArmorGames as confirmed pwned  ·  declined

    5. Don't use Gravitar  ·  declined

    6. Prevent the pwned passwords page from mirroring hashes to Azure App Insights

    7. Enhance the "an address has been breached" email notification to include the address  ·  declined

    8. Include email addresses (or some info) for domain notifications  ·  declined

    9. Include last seen / affected date in stealer results  ·  declined

    10. Add basic correlation logic to compare newly found pastes against current breaches...

    11. Confused by Gravatar notification  ·  declined

    12. Make it possible to opt-out ex-employee addresses from domain search.  ·  declined

    13. Include the Breach Model Name attribute in the HIBP breach notification email.  ·  declined

    14. Allow root domain to verify subdomains

    15. Prevent OSINT /!\  ·  declined

    16. Option to email a report of all exposed passwords linked to my email address back to my email address  ·  declined

    17. Option to return "no breaches found" in json body, rather than simply a 404 status  ·  declined

    18. Use certificates that specify OCSP Must-Staple  ·  declined

    19. Add a "Notes" Column

    20. Add a IFrame (or other kind of embeded form) where we can easily add a search from our site that would send them to HIBP.  ·  declined

    1 2 3 5 7

    Feedback and Knowledge Base

    (thinking…)