Free tool · Your password never leaves this page
Password Breach Check
Billions of passwords have leaked in data breaches over the years — criminals try them everywhere. Check if one of yours is on the list, without the password ever being sent anywhere.
How this is safe: the password is hashed in your browser (SHA-1), and only the first five characters of that hash are sent to the Have I Been Pwned database — which returns hundreds of possible matches for your browser to compare locally. The service never sees your password or even its full fingerprint. This is the industry-standard "k-anonymity" method.
Found a breached password?
Change it everywhere it's used, turn on two-factor, and consider a password manager — our generator will make you a strong replacement right now.