Free tool

Has your password been leaked?

Check any password against billions of leaked ones in seconds. It is scrambled inside your browser, so we never see it.

Only the first 5 characters of a one-way fingerprint of your password leave this device, and the field is cleared as soon as you click Check.

How it works

  1. You type a password. It never leaves this tab.
  2. Your browser scrambles it into a one-way fingerprint (SHA-1) that cannot be turned back into the password.
  3. Only the first 5 characters are sent. Hundreds of different passwords share them.
  4. Your browser finds the match in the list that comes back and shows the result.

Found in a leak? Do this

  • Stop using it everywhere, not just on one site.
  • Replace it with a long, unique password (16+ characters).
  • Keep passwords in a password manager such as KeePassXC or Bitwarden.
  • Turn on two-factor authentication wherever you can.
Generate a strong password →

"Found" means this exact password appears in at least one public leak. "Not found" is good news, but does not by itself make a password strong. Leaked-password data: Have I Been Pwned – Pwned Passwords.