Snippet to check a password against the Have I Been Pwned API

check-password.js

const PASSWORD = '';

const crypto = require('crypto')
const shasum = crypto.createHash('sha1')
const http = require('https');
shasum.update(PASSWORD);
const hash = shasum.digest('hex').toUpperCase();

http.get('https://api.pwnedpasswords.com/range/' + hash.substr(0,5), res => {

  const chunks = [];

  res.on('data', data => chunks.push(data));

  res.on('end', () => {
    
    const hashes = Buffer
      .concat(chunks)
      .toString()
      .split('\r\n')
      .filter(line => line.includes(hash.substring(6)))
      .join('\n');

    console.log(hashes || 'You good');

  });

});