Back to Explore Tools

Password Breach Checker

Check if a password has appeared in a known data breach, without ever sending the real password anywhere.

Input

How is this private?

Your password is hashed right here in your browser. Only the first 5 characters of that hash are ever sent to the breach database (HaveIBeenPwned's Pwned Passwords API) - never the real password, and never the full hash. The database sends back every entry that shares those first 5 characters, and the actual match happens locally, on your device. You can verify this yourself by opening your browser's developer tools (Network tab) before checking.

Output

Enter a password to check it against known data breaches.