Skip to content

Glossary: Web App Security and Authentication

Have I Been Pwned

Also written: k-anonymity

A service whose range API checks new passwords against breaches. You send only the first five characters of the password's SHA-1 hash, so the password never leaves your server.

Where the book teaches it

Related terms

Pepper