PHPackages                             nickurt/laravel-pwned-passwords - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. nickurt/laravel-pwned-passwords

ActiveLibrary[Security](/categories/security)

nickurt/laravel-pwned-passwords
===============================

PwnedPasswords for Laravel 11.x/12.x/13.x

2.1(3mo ago)187.6k↓75%3MITPHPPHP ^8.2CI passing

Since Feb 27Pushed 3mo ago2 watchersCompare

[ Source](https://github.com/nickurt/laravel-pwned-passwords)[ Packagist](https://packagist.org/packages/nickurt/laravel-pwned-passwords)[ RSS](/packages/nickurt-laravel-pwned-passwords/feed)WikiDiscussions master Synced today

READMEChangelogDependencies (8)Versions (15)Used By (0)

Laravel Pwned Passwords
-----------------------

[](#laravel-pwned-passwords)

[![Build Status](https://github.com/nickurt/laravel-pwned-passwords/workflows/tests/badge.svg)](https://github.com/nickurt/laravel-pwned-passwords/actions)[![Total Downloads](https://camo.githubusercontent.com/76cb5765b38b717589289832d5283a19b95a5711c133ef73ae04d41472bb8f8a/68747470733a2f2f706f7365722e707567782e6f72672f6e69636b7572742f6c61726176656c2d70776e65642d70617373776f7264732f642f746f74616c2e737667)](https://packagist.org/packages/nickurt/laravel-plesk)[![Latest Stable Version](https://camo.githubusercontent.com/03635c5d85d5ae853c278a07f01d1cecb74533892f43c960cb1e55cd21a51901/68747470733a2f2f706f7365722e707567782e6f72672f6e69636b7572742f6c61726176656c2d70776e65642d70617373776f7264732f762f737461626c652e737667)](https://packagist.org/packages/nickurt/laravel-plesk)[![MIT Licensed](https://camo.githubusercontent.com/8ffbb5e061d9d653174f8cc1070d6757996085ba7f34f49a126e2dee64158efe/68747470733a2f2f706f7365722e707567782e6f72672f6e69636b7572742f6c61726176656c2d70776e65642d70617373776f7264732f6c6963656e73652e737667)](LICENSE.md)

### Installation

[](#installation)

Install this package with composer:

```
composer require nickurt/laravel-pwned-passwords

```

Copy the config files for the PwnedPasswords-plugin

```
php artisan vendor:publish --provider="nickurt\PwnedPasswords\ServiceProvider" --tag="config"

```

### Examples

[](#examples)

#### Validation Rule - IsPwnedPassword

[](#validation-rule---ispwnedpassword)

```
// FormRequest ...

public function rules()
{
    return [
        'password' => ['required', new \nickurt\PwnedPasswords\Rules\IsPwnedPassword(20)]
    ];
}

// Manually ...

$validator = validator()->make(request()->all(), ['password' => ['required', new \nickurt\PwnedPasswords\Rules\IsPwnedPassword(20)]]);
```

The `IsPwnedPassword`-rule has one optional paramter `frequency` (default 10) to validate the request.

#### Manually Usage - IsPwnedPassword

[](#manually-usage---ispwnedpassword)

```
$isPwnedPassword = \PwnedPasswords::setFrequency(20)
    ->setPassword('laravel-pwned-passwords')
    ->isPwnedPassword();
```

#### Events

[](#events)

You can listen to the `IsPwnedPassword` event, e.g. if you want to log the `IsPwnedPassword`-requests in your application

##### IsPwnedPassword Event

[](#ispwnedpassword-event)

This event will be fired when the password is above the frequency of pwned passwords `nickurt\PwnedPasswords\Events\IsPwnedPassword`

### Tests

[](#tests)

```
composer test
```

---

###  Health Score

57

—

FairBetter than 98% of packages

Maintenance80

Actively maintained with recent releases

Popularity32

Limited adoption so far

Community15

Small or concentrated contributor base

Maturity83

Battle-tested with a long release history

 Bus Factor1

Top contributor holds 85.7% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~226 days

Recently: every ~305 days

Total

14

Last Release

107d ago

Major Versions

1.11 → 2.02025-02-25

PHP version history (6 changes)1.0PHP ^7.0

1.1PHP ^7.1.3

1.2PHP ^7.2

1.8PHP ^8.0|^7.4

1.10PHP ^8.1

1.11PHP ^8.2

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/5840084?v=4)[Nick](/maintainers/nickurt)[@nickurt](https://github.com/nickurt)

---

Top Contributors

[![nickurt](https://avatars.githubusercontent.com/u/5840084?v=4)](https://github.com/nickurt "nickurt (30 commits)")[![ysbrandB](https://avatars.githubusercontent.com/u/72889753?v=4)](https://github.com/ysbrandB "ysbrandB (2 commits)")[![dependabot-preview[bot]](https://avatars.githubusercontent.com/in/2141?v=4)](https://github.com/dependabot-preview[bot] "dependabot-preview[bot] (1 commits)")[![Jessseee](https://avatars.githubusercontent.com/u/21026046?v=4)](https://github.com/Jessseee "Jessseee (1 commits)")[![RyanTheAllmighty](https://avatars.githubusercontent.com/u/1723537?v=4)](https://github.com/RyanTheAllmighty "RyanTheAllmighty (1 commits)")

---

Tags

have-i-been-pwnedhaveibeenpwnedlaravelpasswordspwnedpwned-passwordslaravelhaveibeenpwnedpwned-passwords

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/nickurt-laravel-pwned-passwords/health.svg)

```
[![Health](https://phpackages.com/badges/nickurt-laravel-pwned-passwords/health.svg)](https://phpackages.com/packages/nickurt-laravel-pwned-passwords)
```

###  Alternatives

[statamic/cms

The Statamic CMS Core Package

4.8k3.6M986](/packages/statamic-cms)[backpack/crud

Quickly build admin interfaces using Laravel, Bootstrap and JavaScript.

3.4k3.7M223](/packages/backpack-crud)[unopim/unopim

UnoPim Laravel PIM

10.5k2.4k](/packages/unopim-unopim)[bagisto/bagisto

Bagisto Laravel E-Commerce

27.6k172.1k9](/packages/bagisto-bagisto)[grumpydictator/firefly-iii

Firefly III: a personal finances manager.

23.9k69.5k](/packages/grumpydictator-firefly-iii)[firefly-iii/data-importer

Firefly III Data Import Tool.

8035.8k](/packages/firefly-iii-data-importer)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)