Okta launches PassProtect, a free browser-based extension for Chrome that compares passwords with Troy Hunt's Have I Been Pwned database
Okta just launched a free browser extension for Google Chrome today. After installing PassProtect, your browser will compare the passwords you type with Troy Hunt's Have I Been Pwned.
Context & Ripple Effects
Troy Hunt opened his leak corpus to developers in February 2018 with the Pwned Passwords API — 500M+ breached passwords queryable without exposing the user's actual login — and 1Password was among the first adopters, folding breach checks into its Watchtower feature by June. Okta's PassProtect is the next step in that diffusion: instead of living inside a paid password manager, the check now runs directly in Chrome as you type.
The strategic wrinkle is who's shipping it. Okta sells identity management to enterprises, so a free consumer extension is brand reach into the browser rather than a product line — and it staked that ground months before Google itself entered with its own Password Checkup extension, which later surfaced data showing 1.5% of all website logins use compromised credentials.
First-order effects
- Chrome users get real-time warnings when a password they type appears in Have I Been Pwned's breach corpus, turning breach awareness from a periodic manual lookup into something that happens at the point of login.
Second-order effects
- Browser vendors are pushed to build this natively: Google's Password Checkup launch within months of PassProtect shows the extension layer is a staging ground for features Chrome will eventually absorb, squeezing standalone add-ons on both sides.
Third-order effects
- Credential-breach checking is consolidating around two distribution points — password managers like 1Password and the browsers themselves — leaving room for independent extensions mainly where platforms lag, and making Hunt's API the shared data layer underneath all of them.
The trend: Breach-corpus password checking is migrating from specialist tools and password managers into browsers as a default security layer, with Troy Hunt's database serving as the common infrastructure.