you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 9 months ago

And as far as I remember: only a hash of your password is sent. So, if the hash you sent matches something on their powned list, they'll tell you. If it's not on their list, then it is just a meaningless hash (your personal information was not exposed)

  • source
  • parent