The creator of the site where you can check if your password is on the rise somewhere, Have I Been Pwned (HIBP), recently announced that the site will start a stronger collaboration with the US FBI. In practical terms, this means that the FBI will share relevant information with the site.
And so, the FBI got in touch and we started a discussion about what it might look like to provide them with a way to feed and view hacked HIBP passwords via the Pwned Passwords feature. Their goal here is perfectly aligned with mine, and I dare say, with the goals of most of the people who read this: to protect people from account acquisitions by warning them proactively when their password is compromised. Entering these passwords into HIBP gives the FBI the opportunity to do so nearly a billion times every month. It’s a good leverage
This, in turn, could mean that more leaked passwords could appear on the site sooner than before and that the FBI has direct access to the site’s huge database of leaked passwords, which could facilitate future criminal investigations.