Have I Been Pwned

find_pass.sh

#!/bin/bash
# A small script for querying the https://haveibeenpwned.com/ API to see if your
# password has been leaked, and how many have the same passphrase. 
# It is only the first 5 characters of the hash of your password that is sent to 
# the server, and what will be printed is something like this:
# 018E42F7FF3A3AD8DFD5A4EB6C78AFFA87C:16173
# which is the whole hash of the password, and how many occurences that was found.

while true; do
    read -s -p "enter password> " N
    hash=$(echo -n $N | tr -d '\n' | sha1sum)
    curl https://api.pwnedpasswords.com/range/${hash:0:5} 2>/dev/null \
    | grep $(echo ${hash:5:35} | tr '[:lower:]' '[:upper:]')
done