I've had many offers to sponsor HIBP, to monetarily reward me for product placement and indeed to buy the service outright. As soon as there's money involved, motives are questioned people will assume the core objective is to monetise the service and clearly with those more nefarious offerings, that was precisely the MO. In that post, I talked about more nefarious operators working in the same space as HIBP purely to cash in on the misfortune of others. There's no way to sugar-coat this: HIBP only exists due to a whole bunch of highly illegal activity that has harmed many individuals and organisations alike The very first sentence of that blog post was this: That blog post had been in the works for many months before this partnership was conceived of, but I ultimately decided to get it out before this announcement to help explain my thinking. Just last week, I wrote about the legitimisation of HIBP. The Intent of HIBP Has to Remain Beyond Reproach I want to talk about why that is, what's changed and what the new partnership looks like. This is the first of its kind for me and I've actively avoided anything of this nature until now. Today, I'm announcing a partnership between HIBP and 1Password. That post was my own personal wakeup call it was the very point where I observed that what we all needed to do was to 'liberate ourselves from the tyranny of passwords', as I said at the time, and that's precisely what I did: I went and bought 1Password and I've been using it every single day since across all my devices. The strength of most passwords is terrible.

In an era well before the birth of Have I Been Pwned (HIBP), I was doing a bunch of password analysis on data breaches and wouldn't you know it - people are terrible at creating passwords! Of course, we all know that but it's interesting to look back on that post all these years later and realise that unfortunately, nothing has really changed. The penny first dropped for me just over 7 years ago to the day: The only secure password is the one you can't remember.

One password free alternative