Password Breaches: Why Your Credentials Are Already Compromised

Over 24 billion username-password pairs are currently available on the dark web. The chances that at least one of your passwords has been compromised are statistically near-certain.

The RockYou2024 Compilation

The RockYou2024 password compilation contains nearly 10 billion unique plaintext passwords, aggregated from thousands of breaches over two decades. This dataset enables credential stuffing attacks at unprecedented scale.

Moving Beyond Passwords

// Implementing WebAuthn for passwordless authentication
const credential = await navigator.credentials.create({
    publicKey: {
        challenge: new Uint8Array(32),
        rp: { name: "BreachWatch" },
        user: {
            id: new Uint8Array(16),
            name: "user@example.com",
            displayName: "User"
        },
        pubKeyCredParams: [
            { type: "public-key", alg: -7 },  // ES256
            { type: "public-key", alg: -257 }  // RS256
        ],
        authenticatorSelection: {
            authenticatorAttachment: "platform",
            userVerification: "required"
        }
    }
});