Pwned Passwords check

See if a password has appeared in known breaches.

The browser hashes the password, sends only the first five SHA-1 characters to Have I Been Pwned, then checks the returned hash suffixes locally.

Password Checker

Use this for a password you are considering changing or retiring. Do not reuse passwords that appear in breach data.

No full password is sent to this site or to HIBP.

Enter a password to check its breach exposure.