# Pwned Passwords Validator

**URL:** <https://meta.discourse.org/t/pwned-passwords-validator/90074>\
**Category:** Plugin\
**Created:** [June 17, 2018, 11:10pm UTC](https://meta.discourse.org/t/pwned-passwords-validator/90074 "2018-06-17T23:10:34Z")\
**Posts on this page:** 1\
**Showing post:** 30

<div class="post-metadata">

**Author:** ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)\
**Post date:** [October 13, 2019, 3:45pm UTC](https://meta.discourse.org/t/pwned-passwords-validator/90074/30 "2019-10-13T15:45:25Z")

</div>

Why generate the password at the server?

Assuming the user needs to save it wouldn’t it make sense on the user managing responsibility for password generation? Their credential manager of choice likely already does this.

---

_[View the full topic](https://meta.discourse.org/t/pwned-passwords-validator/90074)._