Signup hardening
Reject passwords already seen in known breaches before the account is created.
Security API
Check a password against Syndaq breach intelligence in one POST. The response is only breached status and occurrence count—never store or return the plaintext password in your application logs.
At a glance
Use cases
Reject passwords already seen in known breaches before the account is created.
Block re-use of compromised credentials during recovery flows.
Enforce breach-aware password rules inside internal tools and SSO apps.
Prompt users to change credentials when a submitted password is flagged.
Integration
Subscribe to a Password Breach plan and copy your pb_sec_ secret key from the client area.
Send JSON {\"password\":\"...\"} to /v1/pwbreach/lookup from your backend only.
If breached is true, reject or require a stronger password.
Example
Every response includes a request_id for support correlation.
Rate limit and quota headers are returned on authenticated routes so you can backoff gracefully.
Authenticated with your Syndaq secret key over HTTPS. Call from your backend only—never embed passwords or secret keys in client-side code. Responses include breached and count only.
curl -s "https://api.syndaq.com/v1/pwbreach/lookup" \
-H "Authorization: Bearer pb_sec_YOUR_SECRET_KEY" \
-H "Content-Type: application/json" \
-d '{"password":"YOUR_PASSWORD_HERE"}'{
"success": true,
"breached": true,
"count": 3842,
"cached": true,
"request_id": "b3c4d5e6f78901234567890123456cd"
}Reference
Included with your Syndaq Password Breach plan.
| Method | Path | Description |
|---|---|---|
| POST | /v1/pwbreach/lookup |
Check a password from a JSON body (plaintext is never stored). |
| GET | /v1/pwbreach/lookup |
Check a pre-hashed SHA-1 password via ?sha1=. |
| GET | /v1/pwbreach/status |
Returns plan limits and quota for the authenticated key. |
Pricing
Transparent limits. Upgrade when your traffic grows—no surprise overages without a plan change.
Development and light production lookups.
Higher throughput for production apps.
High-volume lookups with priority limits.
FAQ
Pick a plan, create your keys in the client area, and start calling the API in minutes.
Choose a plan Ask a question