Has your password been leaked?

Check whether a password appears in known data breaches. It is checked safely: your password never leaves your browser.

Known data breaches

Hundreds of millions of passwords from real data breaches, from the Pwned Passwords collection by Have I Been Pwned.

Privacy by design

Your password is scrambled in your own browser. Only the first 5 characters of the scrambled version are sent; the check is finished in your browser.

Strength

A quick estimate of how strong the password is, with advice on making it better.

Questions

Is it safe to type my password here?
Yes. The password never leaves your browser and is not stored. Only the first 5 characters of its SHA-1 hash are sent, which matches hundreds of different passwords, so nobody can tell which one you checked.
My password was found. What now?
Change it everywhere you use it, starting with email and banking, and turn on two-step verification. Use a password manager so every account gets its own password.
My password was not found. Is it safe?
It hasn’t appeared in a known leak, but it can still be easy to guess. Long and unique is what matters.
Can you check my email address for leaks?
Not yet. For that, use haveibeenpwned.com.

OZAG Technologies · KVK 42167370 · Laan van Oversteen 20, 2289 CX Rijswijk · +31 6 24496620 · support@ozagsecurity.com