password-pwn-check.py

import requests, getpass, hashlib
"""
Uses Troy Hunt's HaveIBeenPwned password check API.
https://haveibeenpwned.com/API/v2#PwnedPasswords
"""

rawpass = getpass.getpass().encode('utf-8')
passhash = hashlib.sha1(rawpass).hexdigest()
print("Checking hash: {}".format(passhash))
r = requests.get("https://haveibeenpwned.com/api/pwnedpassword/{}".format(passhash),
                 headers={"accept": "application/vnd.haveibeenpwned.v2+json"})

if r.status_code == 200:
  print("Password listed as compromised")
elif r.status_code == 404:
  print("Password not exposed here")
else:
  print("Unexpected error: {} {}".format(r.status_code, r.text))