Troy Hunt

Rating

Domains

Scouting report

Built Have I Been Pwned in 2013 as a way for ordinary people to find out whether their account was in a dump, and it became infrastructure: browsers, password managers and the NIST-endorsed practice of checking passwords against known-breached lists all query it, using a k-anonymity scheme that never sends the password. Runs it as a public good rather than a product.

Curator’s note

One person’s side project ended up inside the login flow of half the web.

Portrait

Painted from a photograph of Troy Hunt by Troy Hunt, licensed CC BY-SA 4.0.

Sources

• 01Troy Hunt en.wikipedia.org
• 02Have I Been Pwned haveibeenpwned.com