PassChecker

Package Description

MODX package for checking compromised passwords against HIBP Passwords.

After a user signs in their password will be checked against known breaches by sending the first five characters of a sha1 hash to the Passwords API. The user will be notified if the password is found. This creates awareness and provides a easy way of changing the password from within the pop-up. 

Usage/Installation Instructions

After installing the package will run automatically. 

System Settings:

• Notify threshold: Optional setting for a threshold before a user will be notified.
• Require password change: Option for requiring a password change. This will prevent a user from ignoring the message.