# Pwned Passwords Validator

**URL:** <https://meta.discourse.org/t/pwned-passwords-validator/90074>\
**Category:** Plugin\
**Created:** [17.Июнь.2018 23:10:34 UTC](https://meta.discourse.org/t/pwned-passwords-validator/90074 "2018-06-17T23:10:34Z")\
**Posts on this page:** 1\
**Showing post:** 14

<div class="post-metadata">

**Author:** ![TheBestPessimist](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/thebestpessimist/32/247704_2.png) [@TheBestPessimist](https://meta.discourse.org/u/TheBestPessimist)\
**Post date:** [18.Июнь.2018 13:06:07 UTC](https://meta.discourse.org/t/pwned-passwords-validator/90074/14 "2018-06-18T13:06:07Z")

</div>

> [@jtbayly](#):
>
> it makes sense to disallow passwords that have “only” been compromised once,

I disagree:

For a password which has only be hacked 3 times (for example) i believe there’s a rather big chance that _different_ people are using that pass, that it is for the same person to reuse it. Why? because it’s an _unused_ password.

100% secure passwords would really deter people from using your forum, just because you don’t accept their password, even though it is one made of 16 characters.

---

_[View the full topic](https://meta.discourse.org/t/pwned-passwords-validator/90074)._