Glossary: Identity and Access Management

k-anonymity

Checking whether a password is breached by sending only the first 5 characters of its SHA-1 hash. The service returns all matching suffixes and you look for yours locally, so the service can't tell which password you checked.