Password Breach Checker

Find out whether a password has been exposed in a data breach. Your password itself is never sent anywhere.

Sends only the first 5 characters of a hash, never your password Free, no sign-up Works on mobile
Password to check
How your password stays private

Your password is hashed with SHA-1 in your browser. Only the first 5 characters of the hash are sent to the Have I Been Pwned service, which returns hundreds of matching hashes. The comparison happens on your device, so neither we nor the service ever see your password (k-anonymity).

How to use Password Breach Checker

  1. Type the password.
  2. Click Check.
  3. If it has been leaked, stop using it and change it wherever it is used.

Frequently asked questions

How can this be private if it uses an online service?

Your password is hashed in your browser, and only the first 5 characters of the hash are sent. The service returns hundreds of possible matches and your device checks for yours.

My password was found. What now?

Change it on every site where you used it, use a unique password for each account, and turn on two-factor authentication.