// security tool
Password Breach Checker
Check if your password has been exposed in known data breaches. Your password is never sent to our servers — we use K-anonymity technology.
Check Your Password Security
Enter a password to check if it has been compromised in any known data breaches.
How It Works
1
Local HashYour password is hashed with SHA-1 in your browser
2
Partial SendOnly the first 5 chars of the hash are sent to HaveIBeenPwned
3
Local MatchWe search thousands of hash suffixes locally on your device
4
ResultDisplayed without ever revealing your password
Privacy & Security
K-AnonymityYour actual password is never transmitted
No LoggingWe don't store any queries or results
Client-SideHashing happens entirely in your browser
Trusted DataHaveIBeenPwned by Troy Hunt
Frequently Asked Questions
Yes, completely safe. Your password is hashed locally in your browser using SHA-1, and only the first 5 characters of the hash are sent to HaveIBeenPwned. This K-anonymity technique ensures your actual password never leaves your device.
HaveIBeenPwned is a service created by security researcher Troy Hunt that lets you check if your data has been compromised in data breaches. It contains over 600 million compromised passwords from various breaches.
Change it immediately on all accounts where you use it. Use a password manager to generate and store unique, strong passwords for each account. Enable two-factor authentication wherever possible.
The HaveIBeenPwned database is regularly updated as new breaches are discovered and verified. This tool checks against the most current version each time you run a search.
