This is why I never check passwords against haveibeenpwned. The idea of sending your passwords to a third party is pretty crazy. Even when I knew the owner and trusted him, there’s no way I’d know everyone with access. And now the site could be sold to someone like Google and God knows what they would do with all that traffic.
I used to download the whole file and check locally, but it’s too much of a pain to do consistently.
I used to download the whole file and check locally, but it’s too much of a pain to do consistently.