DFIELDSOLUTIONS

Free software

LabSigilock: Check your passwords without exposing them

Local entropy + reuse analysis plus the HIBP k-anonymity pattern: SHA-1 split into prefix/suffix, the suffix matched on-device. 19 tested assertions.

Free software1 sections · 2 min readBy Dezső Mező.mdFree softwareSigilock

Sigilock checks how strong your passwords are and whether they have been breached, without ever sending them anywhere. It combines local entropy and reuse analysis with the HIBP k-anonymity pattern: the SHA-1 hash is split into prefix and suffix, only the prefix is queried, and the suffix is matched on-device. It is a from-scratch, dependency-light build covered by 19 tested assertions that you can download and run locally.

01About the app

Secure-by-design thinking - applied k-anonymity

What to take away

  • Local entropy + reuse analysis plus the HIBP k-anonymity pattern: SHA-1 split into prefix/suffix, the suffix matched on-device. 19 tested assertions.
  • Download: Sigilock (ZIP)
We build this for clientsFull-stack

Read the full write-up

More from the lab

Browse all entries

Want this looked at on your own system?Start a conversation

5.0
“New shop, more orders in the first week.”Müller Márk · GeekCornerManaging Director · Hungary