Glossary: Web App Security and Authentication
Have I Been Pwned
Also written: k-anonymity
A service whose range API checks new passwords against breaches. You send only the first five characters of the password's SHA-1 hash, so the password never leaves your server.