Hundreds of millions of real passwords have leaked in data breaches. Check yours without revealing it.

How we keep your password private

Your password is turned into a SHA-1 fingerprint in your browser. Only the first 5 characters of that fingerprint are sent to the Have I Been Pwned database, which returns hundreds of possible matches. Your browser then checks for a match locally. Your password, and even its full fingerprint, never leave your device.

Found in a breach?

Stop using that password, change it on every site where you used it, and save the new ones in your Password Vault.