Has this password leaked?

Checks against over 900 million breached passwords from Have I Been Pwned.

How your password stays private

  1. Your browser turns the password into a SHA-1 hash. The password itself never leaves this page.
  2. Only the first 5 of the hash's 40 characters are sent. Hundreds of passwords share those 5 characters.
  3. The service returns every matching hash, and your browser checks for a match locally.