Weave Code
Weaver
Helps Laravel developers discover, compare, and choose open-source packages. See popularity, security, maintainers, and scores at a glance to make better decisions.
Feedback
Share your thoughts, report bugs, or suggest improvements.
Subject
Message
Log in Register
Home
Packages
Wn Pwnedpasswords Plugin

Wn Pwnedpasswords Plugin Laravel Package

winter/wn-pwnedpasswords-plugin

Adds a Pwned Passwords validation rule to Winter CMS, checking passwords against the Have I Been Pwned breach database using k-anonymity so compromised credentials are rejected during registration and password resets.

View on GitHub
Deep Wiki
Context7

Winter Pwned Passwords protects Winter CMS applications by rejecting passwords found in the Have I Been Pwned Pwned Passwords database. It adds a validation rule that checks submitted passwords during registration, password resets, or account updates, helping prevent credential-stuffing and compromised credentials.

  • Checks passwords against the Pwned Passwords API using k-anonymity; only a partial SHA-1 hash is sent.
  • Configurable breach threshold to allow passwords seen fewer times.
  • Integrates with Winter CMS validation rules and user password flows.
  • Lightweight, cache-friendly, and easy to enable.
Weaver

How can I help you explore Laravel packages today?

Conversation history is not saved when not logged in.
Prompt
Add packages to context
No packages found.
skyraptor/chatter
edlugz/sasapay
abbasudo/artisan-route
mirvan/ippanel
ignibyte/aic-framework
glavweb/data-schema-bundle
glavweb/datagrid-bundle
tacticmedia/scim-server
uni-method/frame
neika-ai/sdk
adachsoft/php-code-style
pharaonic/laravel-notification-dependencies
beautinow/translug
dev-brainiac/bot-cloaked
octoberrain/html
octoberrain/extension
octoberrain/exception
octoberrain/contracts
adachsoft/api-version-bundle
cgv/localized-resource