Search

Password Breach Checker

How It Works

k-Anonymity: Your password is SHA-1 hashed locally. Only the first 5 characters of the hash are sent to the API — the full password never leaves your device.
900M+ Passwords: Powered by Troy Hunt's Have I Been Pwned database containing over 900 million real-world breached passwords from data breaches worldwide.
If Breached: Change it immediately everywhere you use it. Use a unique, strong password for each account and enable two-factor authentication.
Uses the Have I Been Pwned Passwords API. No passwords are stored or logged.