@i0null well I tried all of my most important keys, and luckily they are all safe! I'm a security expert!! 😏 

@i0null on a serious note, this is why I don't like it when sites, without my permission, check my password against "haveibeenpwnd" - even if they probably (I hope?!) use the hashed variant.. who says I trust that site?? wth

@bazkie in case you are wondering how it works, this explains it pretty nicely: https://haveibeenpwned.com/API/v3#SearchingPwnedPasswordsByRange. I just checked and in the blog post where this API was introduced (https://www.troyhunt.com/enhancing-pwned-passwords-privacy-by-exclusively-supporting-anonymity/) Troy Hunt mentions that the non-anonymity enforcing endpoints have been removed in 2018, so the services using it can't really do the wrong thing anymore. I can understand the hesitation and concern with it, but I am convinced it is a net positive overall. @i0null