Free security tool · Private
Has your password been leaked?
Check a password against more than a billion leaked passwords, without ever sending it anywhere. If it shows up, criminals already have it.
5BAA6…, sends just those first 5 characters to Have I Been Pwned and gets back every leaked password whose code starts the same way. The match happens here, on your device.Good to know
Questions people ask
Is it safe to type my password here?
Yes. Your browser turns the password into a scrambled code (a SHA-1 hash) and sends only the first 5 characters of that code to Have I Been Pwned, a free service run by security researcher Troy Hunt. It sends back hundreds of possible matches and your browser checks them itself. Your password, and even its full code, never leave your device.
What does it mean if my password was found?
It was in a data breach and is on lists criminals use to break into accounts. Even if it wasn't your account that leaked, change it everywhere you use it, starting with email and banking.
My password wasn't found. Is it safe?
It isn't on any known breach list, which is good. It still needs to be long, used for only one account, and backed up by two-step login.
How do I check if my email address was in a breach?
Visit haveibeenpwned.com and enter your email address. Business owners can check their whole domain there too. We can help you set up alerts and fix what turns up.
Found a leaked password?
Book a free security check. We'll look at how your team signs in and help you lock it down with two-step login and a password manager.
More free tools: see them all