⚠️ This documentation is not complete and will change. Documentation and API References are actively being updated.
curl --request POST \
--url https://api.propops.app/api/security/password-breach-check \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"password": "P@ssw0rd123",
"csrf_token": "abc123def456",
"return_count": false
}
'{
"success": true,
"message": "This password has appeared in 3,200 data breaches.",
"breached": true,
"count": 3200
}Checks a password against the Have I Been Pwned breach database using the k-Anonymity model. Results are cached.
Required permission: api.security.password_breach_check.read
curl --request POST \
--url https://api.propops.app/api/security/password-breach-check \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"password": "P@ssw0rd123",
"csrf_token": "abc123def456",
"return_count": false
}
'{
"success": true,
"message": "This password has appeared in 3,200 data breaches.",
"breached": true,
"count": 3200
}All API requests must include a valid Bearer token in the Authorization header.
Tokens are 64-character SHA-256 session hashes issued by the PropOps authentication system.
Example:
Authorization: Bearer a1b2c3d4e5f6...