Show HN: 1Pwned

#1

Post by peteski22 » Sat, Nov 15, 2025, 10:17 PM UTC

Check all your 1Password logins against Have I Been Pwned's API to figure out which one might be Pwned.

After the Synthient Stealer Log Threat Data Breach (https://synthient.com/blog/the-stealer-log-ecosystem) I realised: you can be in a vulnerable spot if you happen to have a different password for every website, BUT the same email address.

Hopefully this is useful to others who want to be able to find out 'which' login was likely Pwned when they get that alert.

Show HN: 1Pwned
github.com

Re: Show HN: 1Pwned

#2

Post by treetalker » Sun, Nov 16, 2025, 6:04 AM UTC

How does this information differ from, and provide more value than, 1Password's built-in Watchtower functionality?

Re: Show HN: 1Pwned

#3

Post by peteski22 » Sun, Nov 16, 2025, 7:00 AM UTC

treetalker wrote: post #2

How does this information differ from, and provide more value than, 1Password's built-in Watchtower functionality?

TBH now that I’ve looked into it … I think it doesn’t really seem different at the moment. I don’t know how I missed this (it was late last night when I made the tool)

Re: Show HN: 1Pwned

#4

Post by peteski22 » Sun, Nov 16, 2025, 10:00 AM UTC

peteski22 wrote: post #3

treetalker wrote: post #2

How does this information differ from, and provide more value than, 1Password's built-in Watchtower functionality?

TBH now that I’ve looked into it … I think it doesn’t really seem different at the moment. I don’t know how I missed this (it was late last night when I made the tool)

What's weird is that the Watchtowwer in the 1Password desktop app didn't show this, but the mobile app does show 'Vulernable Passwords' which it uses the Have I Been Pwned breach data for. 0_o