security/pwned-check 2.2_2,1 DragonFly

Check whether password is known to have been exposed in a data breach

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
License: BSD2CLAUSE
Categories: security
Package size: 4.3 KiB, 4.4 KiB installed

Description

Pwned Passwords are hundreds of millions of real world passwords exposed in data breaches. This exposure makes them unsuitable for ongoing use as they are at much greater risk of being used to take over other accounts.

This script offers 2 methods to check whether a password has been exposed in an uncovered breach:

Online check implemented in such a way that the password to be checked does not need to be sent to the remote database server.
Local check against a copy of the pawned passwords database.

Since the local copy of the database requires nearly 20 GB of disk space (and a download of more than 10 GB of compressed data) the access via the online check should be preferred, if the compatible with operational and security requirements.

In the other systems

System

Port

Version

DragonFly

security/pwned-check

2.2_2,1

FreeBSD

security/pwned-check

2.2_2,1

HardenedBSD

security/pwned-check

2.2_2,1

GhostBSD

security/pwned-check

2.2_2,1

Install

Binary package:

pkg install pwned-check

From DPorts:

cd /usr/dports/security/pwned-check && make install clean

Dependencies

No port depends on this one.

Configuration

No options to configure.

Service scripts: none

Message after installing

This port needs a password hash database that is to be downloaded with
the following command:

    pwned-check -u

The database files will be installed into /var/db/pwned-check by default.
This directory can be changed in /usr/local/etc/pwned-check.conf.

The installation procedure will fetch 6 GB of compressed data and will
temporarily need 18 GB of free space in that directory and 13 GB when
the installation is complete.

------------------------------------------------------------------------------

If you are no longer using the pwned-check port, then manually delete
the following directory and all its contents:

	/var/db/pwned-check

------------------------------------------------------------------------------