check-pwned-passwords.py

# https://downloads.pwnedpasswords.com/passwords/pwned-passwords-1.0.txt.7z
# https://downloads.pwnedpasswords.com/passwords/pwned-passwords-update-1.txt.7z
import hashlib

def _hash(password):
    p = password.encode('utf-8')
    m = hashlib.sha1()
    m.update(p)
    return m.hexdigest().upper()

pwdfile = open('/path/to/passwords.txt')
pwds = []
for pwd in pwdfile:
    p1 = _hash(pwd.rstrip())
    p2 = _hash(pwd.rstrip().lower())
    pwds.append(p1)
    if p1 != p2:
        pwds.append(p2)

pwnfile = open('/path/to/pwned-passwords-update-1.txt')
matches = []
for pwn in pwnfile:
    if pwn.rstrip() in pwds:
        matches.append(pwn.rstrip())
        
print(matches)