Safely check if your passwords have been leaked (via haveibeenpwned)

check_pass.sh

#!/bin/sh

read -p 'Password: ' password

hash=`echo -n $password | sha1sum | awk '{ print $1 }'`

echo
echo SHA1 hash: $hash

prefix=${hash:0:5}
suffix=${hash:5:40}

stats=`curl --silent https://api.pwnedpasswords.com/range/$prefix | grep -i $suffix`

echo
echo haveibeenpwned.com says...
echo

bold=$(tput bold)
normal="$(tput sgr0)"

if [ -z "$stats" ]
then
        echo "Your password has ${bold}never${normal} been leaked in data breaches"
else
        leaked_count=${stats:36}
        echo "Your password appeared ${bold}${leaked_count}${normal} time(s) in data breaches"
fi