Password Checker

This project is a simple web-based password checker that allows users to check if their password has been exposed in known data breaches using the Have I Been Pwned API.

Features

• Web form for users to enter a password and check its breach status
• Backend integration with a Python script (check_password.py) that queries the Have I Been Pwned API
• PHP frontend (index.php) that interacts with the Python script and displays results
• Stylesheet in css/styles.css (linked from index.php)
• Works on both XAMPP (Windows) and typical Linux web hosting environments
• Minimal, modern UI with responsive design

How It Works

1. User enters a password in the web form.
2. The PHP backend receives the password and calls the Python script.
3. The Python script uses the k-Anonymity model to securely check the password against the Have I Been Pwned database.
4. The result (number of times the password was found in breaches) is returned to the user.

Requirements

• Python 3.x (with requests library installed)
• PHP 7.x or newer
• Web server (XAMPP for Windows, or Apache/Nginx on Linux)

Setup

1. Clone this repository.
2. Ensure Python and PHP are installed on your server.
3. Install the requests library for Python:

   python -m pip install requests
   

4. Configure the Python path in index.php if needed (see comments in the file for XAMPP vs. Linux hosting).
5. Place the project files in your web server's root directory.
6. Access index.php in your browser and use the form to check passwords.

Security Note

• Passwords are never stored or logged by this application.
• The k-Anonymity model ensures that full passwords are never sent to the Have I Been Pwned API.

License

This project is licensed under the MIT License.