How Big Is k? Measuring Have I Been Pwned's Range Buckets From Node

As of October 9, 2026 "k-anonymity" gets attached to the Pwned Passwords range API in almost every write-up, usually without a value for k. If you are adding a breached-password check to a signup flow