Review rules 7 & 8. Missing title tag (not flair, it must be part of the title) & disclosure if applicable.

Locked in the meantime, send a message when you’ve addressed.

The first comment here from you was llm generated and referenced your site, followed by this post referencing your site.

This comes across like self-promotion, which has rules. Since the post has a lot of comments at the moment I’m going to lock it, but if you keep only posting/commenting things about your site without otherwise participating then they will be removed going forward.

Edit: Revising that. Half are noting this as blogspam. This is being removed.

Please update with tags and disclosure as required, per rules 7 & 8

Definitely a new one for here…

That said, your post is missing the [AIT] tag - AI Topic. Please update asap.

Edit: Locking until updated.

TL;DR:

• No, your passwords/secrets have not been shared anywhere.
• This is a long-standing feature and has been discussed in HA forums before.
• You can turn it off, but that is generally not recommended.

This post has been reported for misinformation.

I agree due to how its phrased by OP, but its not completely off base in that HIBP is used, but it is a severe misunderstanding of how. So I’m going to leave it up for awareness, while adding some notes and a few quick links here.

A quick quote from HA:

Your secrets are never sent anywhere. The check uses an algorithm called K-Anonymity that makes sure the service never sees your password, not even its complete hash. Your secrets and privacy stay protected.

The check is on by default. If you prefer not to run it, you can turn it off using the command line:

ha security options --pwned=false

To turn the check back on again, run:

ha security options --pwned=true

In short - HomeAssistant has never shared your passwords anywhere. HomeAssistant shares a part of a hash. In no way, shape, or form does this expose your passwords/secrets.

1. HA Page on Pwned passwords and secrets
2. HaveIBeenPwned
3. k-anonymity