Password breach checker
Check whether a password appears in known data breaches. The password is never sent: your browser computes its hash and transmits only a fragment using k-anonymity.
- Free, no sign-up or install
- We never store your data or your queries
- Secure lookups from our own server
Responsible use
Use these tools only on domains, addresses or credentials you own or are expressly authorised to assess. Their use is the sole responsibility of the person using them.
How it works
Your browser computes the SHA-1 hash of the password, sends only the first five characters and compares the rest locally. The full password never leaves your device.
Your password is processed in the browser and is never sent to our servers or logged.
A leaked password is usually just the tip of the iceberg
Reused credentials and exposed access are among the most common ways in. A penetration test uncovers the real risk in your organization and how to close it.