I have been using + addressing a LOT more in the several years (according to my password manager I have over 200 in play.) This is along with unique passwords I feel the time to pwnage is lengthened. However I have no idea if those accounts are getting pwned and its daunting to put them all into the system here. I am using plus addressing so much putting my email address into haveibeenpwned actually is starting to be less and less valuable.
I have two email providers that support plus addressing (google and another) and most sites let me use it. its rare when they don't, and I think less of the sites for not supporting it.
The concern about lists that strip out the plus addressing is moot to me. It's great because it decouples the actual login name from the data, if password was included then the breach data is essentially useless with the given password. So stripped lists aren't as much of a concern.
Make this a paid feature. I would pay a little something for this even if it was a donate to unlock feature.
I have been using + addressing a LOT more in the several years (according to my password manager I have over 200 in play.) This is along with unique passwords I feel the time to pwnage is lengthened. However I have no idea if those accounts are getting pwned and its daunting to put them all into the system here. I am using plus addressing so much putting my email address into haveibeenpwned actually is starting to be less and less valuable.
I have two email providers that support plus addressing (google and another) and most sites let me use it. its rare when they don't, and I think less of the sites for not supporting it.
The concern about lists that strip out the plus addressing is moot to me. It's great because it decouples the actual login name from the data, if password was included then the breach data is essentially useless with the given password. So stripped lists aren't as much of a concern.
Make this a paid feature. I would pay a little something for this even if it was a donate to unlock feature.