Understanding Have I Been Pwned's Use of SHA-1 and k-Anonymity
Troy Hunt
JUNE 30, 2022
It's also a slower hashing algorithm; still totally unsuitable for storing user passwords in an online system, but it can have a hit on the consuming service if doing huge amounts of calculations. By any definition of the term, those first 6 bytes tell you absolutely nothing useful about what email address is being searched for.
122 
Let's personalize your content