Dev tools · alternatives · 2026
24 alternatives to Checking 320M passwords in milliseconds with serverless bloom filters
Using serverless functions to provide an API for checking potential passwords against an enormous corpus of passwords leaked from security breaches. - jthomas/serverless-pwned-passwords
This project demonstrates how to check 320 million passwords against a bloom filter using serverless architecture, completing the verification in milliseconds. It's designed for developers building password security… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Checking 320M passwords in milliseconds with serverless bloom filters launched in 2017; newer entries below may have overtaken it.
- 1
Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular! - berzerk0/Probable-Wordlists
2017 · github.com · its alternatives →
- 2
Cuckoo Filter implementation in Go, better than Bloom Filters (unmaintained) - irfansharif/cfilter
2016 · github.com · its alternatives →
- 3PA
2017 · dazzlepod.com · its alternatives →
- 4
Validate the Strength of a Password in Go. Contribute to wagslane/go-password-validator development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 5
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS - matanolabs/matano
2022 · github.com · its alternatives →
- 6
Population based metaheuristic for password cracking. Siga(Simple genetic algorithm) - lyle-nel/siga
2016 · github.com · its alternatives →
- 7
Hashpass▲68A simple, stateless password manager for Chrome
2014 · chromewebstore.google.com · its alternatives →
- 8
Secure and simplify infrastructure access with StrongDM’s Zero Trust PAM platform. Control, audit, and manage access across cloud, databases, servers, and apps from a single, unified solution.
2018 · strongdm.com · its alternatives →
- 9
I’ve been experimenting with structured logic as a way to frame search spaces — not in an academic way, just as a personal project. I wanted to know: what happens if you initialize a brute-force run with a simple equality like xy = x / y? Not as a filter, just as a logical ignition point. I used AES-256-CBC encrypted files with UUID passwords and tested against a 1 million UUID space. It cracked it in under 40 seconds. Then I scaled it to a 1 billion UUID range, and it still found the key without issue. This isn’t a crypto tool, and I’m not trying to solve any cryptographic problems.…
2025 · github.com · its alternatives →
- 10
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 11
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com · its alternatives →
- 12
An Evaluation of Linear Probing Hashtable Algorithms - senderista/hashtable-benchmarks
2019 · github.com · its alternatives →
- 13
fastLane is a stateless and serverless password manager. Use only one password to get access to all of your passwords without storing all of them using a database with recursive hashing. - GitHub - SriLikesToSing/fastLane: fastLane is a stateless and serverless password manager. Use only one passwor
2023 · github.com · its alternatives →
- 14WT
2024 · pico.sh · its alternatives →
- 15NA
2014 · nullpass.org · its alternatives →
- 16
An experimental high-performance DNS query bruteforce tool built with AF_XDP for extremely fast and accurate bulk DNS lookups. - c3l3si4n/pugdns
2025 · github.com · its alternatives →
- 17AP
Hi HN, Bastion Enclave is an experiment in removing centralized trust from password management by eliminating server-side state entirely. Instead of storing an encrypted vault or syncing secrets through a backend, Bastion computes credentials deterministically on-the-fly using explicit cryptographic inputs. Given the same master entropy, service name, username, and version counter, the same password is reproduced across platforms. There is no account system, no database, and no persistent server storage — the server serves static code only. Password generation uses domain-separated salts and…
Feb 2026 · bastion-enclave.vercel.app · its alternatives →
- 18
This preprint introduces a groundbreaking, zero-latency bank interaction framework that solves the Memory Wall problem in cybersecurity. By replacing memorized secrets with Silicon DNA (S-DNA) and securing the transaction layer with Ramanujan's transcendental 1/pi series, we establish a hardware-nat
May 2026 · zenodo.org · its alternatives →
- 19
Cuckoo Filter: Practically better than bloom filter - vedhavyas/cuckoo-filter
2017 · github.com · its alternatives →
- 20
A tool to generate pseudorandom, deterministic passwords. - micromaomao/go-ecbpass
2018 · github.com · its alternatives →
- 21
Passive blue-team security scanner — 582 read-only modules, plus 32 opt-in probes. Runs on your machine. No accounts. No telemetry. - taylannuhogluofficial-png/Tblue
Aug 2026 · github.com · its alternatives →
- 22
Hey HN, I'm so excited to finally share with you what I've been working on recently. One month ago I asked my audience what they wanted to learn about Websites, APIs and Servers security [0]. From the feedback, I've identified a few recurring pain points that I've started to address (and many more) in this new book. From theory to practice, you will learn how low-level network and security protocols work. How to configure Cloudflare to secure and scale your web applications. How to create serverless applications and which database to chose with serverless functions. How to optimize your…
2023 · kerkour.com · its alternatives →
- 23PA
Recently I became interested in knowing whether the passwords I used were in the list of breached passwords. One way to find out is to send your password to the link here https://haveibeenpwned.com/Passwords. However, while the owner of that website is a well respected security researcher, I still don't think it's wise to send my password to another website. So I downloaded the 24gb file, hashed my password and grepped the file for it. That unfortunately took a long time and I realized this was the perfect opportunity to use a BloomFilter and test the inclusion of a password…
2019 · its alternatives →
- 24
Table of Contents Why Serverless? Solution Overview Data Extraction Search Backend Implementation Apache Lucene in a GraalVM Native Binary The Search HTTP Service Wiring Things Up Deployment to AWS …
2020 · morling.dev · its alternatives →
Also compare
- 5+ Billion Passwords in Order of Most Popular alternatives
- Cuckoo Filter Implementation in Go, Better Than Bloom Filters alternatives
- Public API endpoint to check for 6.5B known passwords alternatives
- Entropy Based Password Validation alternatives
- Open-source serverless security lake powered by Rust + Apache Iceberg alternatives
- Cracking passwords with a simple genetic algorithm alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →