# Limito.net

Base URL: https://limito.net
Sitemap: https://limito.net/sitemap.xml
AI summary: https://limito.net/ai.txt

Limito.net is an exposure checker. It accepts an email address, phone number, or password check, then returns a masked report with exposure status and account protection tips.

Primary purpose: help people understand whether an email address, phone number, or password shows exposure signals and what practical account-safety steps to take next.

Important capabilities:

- Email exposure check with masked results and plain-language recommendations.
- Phone exposure check with masked results when a configured provider is available.
- Private password check that uses browser-side SHA-1 hashing and sends only the k-anonymity hash prefix/suffix pattern to the server.
- Clear next steps focused on replacing reused passwords, enabling stronger sign-in protection, reviewing recovery settings, and improving email setup safety when the user owns the domain.

Routes:

- Home: https://limito.net/
- Email API: `POST https://limito.net/api/scan`
- Phone API: `POST https://limito.net/api/phone`
- Password API: `POST https://limito.net/api/password`

Privacy:

- The browser receives only masked email and phone values in reports.
- Optional provider lookups run server-side only when configured.
- Email scan requests are rate limited and short-term cached to reduce abuse and repeated paid lookups.
- Password checks hash in the browser before the request is sent.