2610.1 - Initial commit

README.md

@@ -1,3 +1,26 @@
 # checkpassword_py
 
-Password Checker interface.
+Python/tkinter port of the C# `checkpassword` (SHA1Hash) WinForms app. Checks passwords against a local pwned-password API using SHA1 hashes.
+
+## Requirements
+
+- Python 3
+- tkinter (on Debian/Ubuntu: `sudo apt install python3-tk`)
+
+No other dependencies — stdlib only.
+
+## Run
+
+```
+python3 checkpassword.py
+```
+
+## Features
+
+- **Hash** — SHA1-hashes the entered string and queries `https://www.home.daprogs.net/pwn/indexapi.php`. Shows the hit count if the password is in the master list.
+- **ZeroTrust** — sends only `sha5` (first 5 hash chars) plus 3 chars from a random position, querying `https://www.home.daprogs.net/pwn/zerotrust.php`. Reveals the full hash only if the server confirms a match.
+- **Create Report** — reads `passList-tci.csv` (rows: `user;...;password;domain`), hashes each password, queries the API, and writes compromised entries to `userReport-tci.txt`. Run from the directory containing the CSV.
+
+## Note
+
+SHA1 is used only as a lookup key for the pwned-password service, not for authentication.