{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/ismalicious-com/json-schema/ismalicious-com-password-check-response-schema.json",
  "title": "PasswordCheckResponse",
  "description": "Breach exposure of one password, from its SHA-1 or NTLM hash",
  "x-generated": "2026-11-12",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/ismalicious-com-openapi.json#/components/schemas/PasswordCheckResponse",
  "type": "object",
  "required": [
    "indicatorType",
    "hashType",
    "exposed",
    "verdict",
    "count",
    "prevalence",
    "recommendation",
    "source",
    "sourceUrl",
    "apiVersion"
  ],
  "properties": {
    "apiVersion": {
      "type": "string"
    },
    "corpusUpdatedAt": {
      "type": [
        "string",
        "null"
      ],
      "description": "When the local copy of the corpus was downloaded"
    },
    "count": {
      "type": "integer",
      "format": "int64",
      "description": "Times the password appears in the breach corpus",
      "minimum": 0
    },
    "exposed": {
      "type": "boolean",
      "description": "Seen at least once in a breach"
    },
    "hashType": {
      "type": "string",
      "description": "`sha1` | `ntlm`"
    },
    "indicatorType": {
      "type": "string",
      "description": "Always `password`"
    },
    "prevalence": {
      "type": "string",
      "description": "`none` | `rare` (1–9) | `common` (10–999) | `very_common` (1 000+)"
    },
    "recommendation": {
      "type": "string",
      "description": "One sentence to relay to the user"
    },
    "source": {
      "type": "string"
    },
    "sourceUrl": {
      "type": "string"
    },
    "verdict": {
      "type": "string",
      "description": "`compromised` | `not_found`. Not found says nothing about strength"
    }
  }
}