Password Breach Checker
Check if your password has appeared in a known data breach — without ever sending your password to anyone.
Your privacy is safe: your password is turned into a SHA-1 hash inside your browser, and only the first 5 characters of that hash are sent to the Have I Been Pwned database. The password itself — and even the full hash — never leaves your device, is never logged, and is never stored.
What to do if it was found: change this password immediately on every account that uses it, turn on two-factor authentication where available, and use a unique password for each account.
How to use
- Type the password you want to check (it stays only on this page).
- Click Check for breaches.
- Read the result: found in how many breaches, or not found at all.
Tips for strong passwords
- Use at least 12 characters with a mix of letters, numbers and symbols.
- Never reuse the same password on more than one account.
- A long phrase of random words is both easy to remember and hard to guess.