Compromised Passwords

The Compromised Passwords feature in Password Vault allows administrators to upload lists of known compromised passwords to automatically detect and flag vulnerable credentials stored in the system. This proactive security measure helps organizations identify and replace passwords that may have been exposed in data breaches.

How It Works

When a compromised password list is uploaded:

1. Immediate Scan - All existing passwords in Password Vault are automatically scanned against the uploaded list

2. Continuous Monitoring - Every new or updated password is checked against the compromised list

3. Visual Indicators - Compromised passwords are flagged with warning indicators in the Password Vault interface

4. Security Reports - Administrators can view reports of all compromised credentials

Accessing Compromised Passwords Settings

To access the Compromised Passwords feature:

1. Navigate to Settings > Password Vault.

2. Click on the Compromised Passwords tab.

Uploading a Compromised Password List

To upload a list of compromised passwords:

1. Click the Upload file button.

2. Select your prepared file containing compromised passwords.

3. Choose the appropriate data type:

   • SHA-1 hashes - For files containing hashed passwords (e.g., from Have I Been Pwned)

   • Plaintext passwords - For files containing readable passwords

4. Click Upload and scan Password Vault

Note

The upload process may take some time depending on the file size. Do not refresh or leave the page until the process completes.

File Format Requirements

The system supports two types of compromised password files:

Plaintext Password Files

For plaintext password files, each entry should be placed on a separate line.

password
password123
asd
tajny-sekret
root
!! <3
!! 11QQazx
!! 12Exodia
!! Angela11

SHA-1 Hash Files

For text files containing SHA-1 hashes, each entry should be placed on a separate line. An entry can contain either the hash only or the hash followed by an occurrence count, separated by a colon.

0018A45C4D1DEF81644B54AB7F969B88D65:1
00D4F6E8FA6EECAD2A3AA415EEC418D38EC:2
011053FD0102E94D6AE2F8B83D76FAF94F6:1
012A7CA357541F0AC487871FEEC1891C49C:2
0136E006E24E7D152139815FB0FC6A50B15:2

Format Specification:

• Each line contains an uppercase SHA-1 hash

• Optional occurrence count after a colon (e.g., :1)

• No headers required

• One hash per line

Scan Results

After uploading and scanning:

• The system displays the number of imported compromised passwords

• Shows how many secrets were scanned

• Indicates whether any compromised passwords were found

• Provides a link to view all compromised secrets in Password Vault

Managing Uploaded Files

Once a file is uploaded, you can:

• View Details - See file information including name, size, upload date, and number of imported passwords

• Replace File - Upload a new file to replace the existing compromised password list

• Delete File - Remove the compromised password list from the system

• View Compromised Secrets - Navigate to Password Vault to see all flagged secrets

Related topics:

• Creating Secrets

• Creating Collections

• Overview