Password Pwned Check
Check if your password has been compromised in data breaches using the Have I Been Pwned database
How It Works
This tool uses the Have I Been Pwned database to check if your password has appeared in any known data breaches. Your privacy is protected using k-anonymity:
- Your password is never sent over the internet
- Only the first 5 characters of the SHA-1 hash are sent to the API
- The API returns a list of all hashes matching that prefix
- The full comparison happens locally in your browser
If your password appears in the database, you should change it immediately to protect your accounts.