Breached Passwords Databases

This server hosts the databases of breached passwords used by the Passwords app for Nextcloud.
The data is taken from the haveibeenpwned.com Pwned Passwords list and contains the most common breached passwords.

Create the database yourself

• You should have at least 60GiB of free disk space and 8 GiB of RAM for this.
• Downloading and processing the Pwned Passwords list can take several hours.

Option 1: Import directly into your Nextcloud

• Follow the instructions on haveibeenpwned.com to download the Pwned Passwords list.
• Use the following command to import the file directly into the local database of your Nextcloud. ./occ passwords:pwned-list:process pwnedpasswords.txt --size 25 --mode import More information about this command can be found in the wiki.

Option 2: Create update file for distribution

• Follow the instructions on haveibeenpwned.com to download the Pwned Passwords list.
• Use the following command to create an update file which is compatible with your current Nextcloud setup. ./occ passwords:pwned-list:process pwnedpasswords.txt --size 25 --mode file More information about this command can be found in the wiki.
• Upload the file to your distribution server.
• Configure Nextcloud to use your distribution server. ./occ config:app:set passwords passwords/localdb/source --value="https://yourdomain/yourpath/25m-v:version-:format.zip"; (If you changed the "size" parameter in the previous command, change "25m" to your size)
• Instruct Nextcloud to update the database. ./occ config:app:set passwords passwords/localdb/version --value="0";

This website is operated by the author of Passwords for Nextcloud. It is not related to and not hosted by the operator of your Nextcloud or the Nextcloud GmbH. This website does not store any requests or other user data.

If you need help or have questions, visit the documentation, our forum or our Telegram group.