Password Leak Checker

Have your credentials been exposed in a data breach? This tool checks your password against the Have I Been Pwned database using k-anonymity — only a partial hash is sent, so your full password never leaves your browser.

Processed on your deviceNo signup required100% free
HIBP Check
Uses k-anonymity — only a partial hash is sent
Password

Enter a password to check for breaches

Uses the Have I Been Pwned API with k-anonymity. Your full password never leaves your browser.

How to Use

  1. Enter a password in the input field.
  2. Toggle the eye icon to show or hide the password.
  3. Click Check to query the HIBP database.
  4. See if the password has been found in any data breaches.
  5. If found, choose a different, unique password.

Related Tools

Password Strength Checker

Password Generator

SHA Generator

Frequently Asked Questions

How does k-anonymity protect my password?
Only the first 5 characters of the SHA-1 hash are sent to the API. The full hash (and thus the password) never leaves your browser.
What if my password was found?
Change it immediately. Use a unique, strong password for every account. Consider using a password manager.
Is this API free?
Yes. The HIBP Pwned Passwords API is free for this use case.