What is Password Leak Detection for reCAPTCHA Enterprise?
Password Leak Detection is a reCAPTCHA Enterprise feature that helps your customer determine if the password they are using to log into a website has been leaked or breached. This protects your company from account takeovers and credential stuffing, two of the most prevalent forms of online fraud and abuse.
This advanced feature requires additional setup and integration, and is an area of specialty for HiView’s reCAPTCHA consultants.
How does Password Leak Detection work?
Password Leak Detection works using the same basic principles as Google’s Password Checkup feature within the Chrome browser for those familiar with that tool. However, it does not require any action to be taken by the customer/end user. Google’s Password Checkup database contains over 4 billion usernames and passwords that have been deemed unsafe for use due to third-party data breaches.
Password checking uses secure multi-party computation (MPC) to ensure password leak protection. you must calculate the parameters by using the cryptographic functions required by the high-privacy protocol. To do this, reCAPTCHA Enterprise provides a Java library: java-recaptcha-password-check-helpers.
When a match is identified, companies can then warn that user via an on-screen message, and require that they change their password prior to continuing their login workflow.
What is the cost of Password Leak Detection?
Each time Password Leak Detection is used for a login attempt, this is referred to as an assessment. Each month, companies receive one million assessments for free—any additional assessments are billed according to an easy-to-understand pricing system.
Similar to all other reCAPTCHA Enterprise functions such as spam detection and coupon fraud detection, each assessment is billed at a standard rate of $1.00 USD per 1,000 assessments after the first one million monthly assessments. However, some enterprises may be eligible for discounting. Contact us to learn more about pricing options.
How to gain access to reCAPTCHA Password Leak Detection
This feature is part of a larger suite of reCAPTCHA Enterprise tools that protect businesses and their customers from online fraud. As Password Leak Detection uses the reCAPTCHA Enterprise engine, there is no additional licensing required in order to use it.
Ready to get started? HiView Solutions is a Google-certified reCAPTCHA Enterprise partner and reseller. To learn more about reCAPTCHA and to gain access to implementation and optimization services, support, and more, contact us.
