🔐 Wishlist: Enable Supabase Leaked Password Protection (Pro Plan)

[welshDog]

💡 Wish List Item — Enable When Funded

What it is

Supabase's Leaked Password Protection checks user passwords against HaveIBeenPwned.org on sign-up/login. Blocks compromised passwords automatically.

Why it matters

• Students creating accounts won't be able to use known-breached passwords
• Protects the course platform and student accounts
• Supabase security scanner currently flags this as a WARN

Blocker

🔒 Requires Supabase Pro plan — not available on free tier

When to action

• Upgrade to Supabase Pro
• Go to: Auth → Password Security → Enable Leaked Password Protection toggle
• Done ✅

Cost reference

Supabase Pro is ~$25/month per project

---

Added 8 May 2026 — post birthday-drop security audit 🎂