Pwned Password Checker
Check if a password has been exposed in data breaches. This tool uses the Have I Been Pwned API via the K-Anonymity model, meaning your actual password never leaves your browser.
Network request
This tool sends the value you submit to a network service. Review the destination and response before using it with sensitive data.
Test a Password
Type a password below to check its breach status safely.
Is this safe?
Yes. This tool uses the K-Anonymity model.
When you type a password, your browser creates a SHA-1 hash of it. It only sends the first 5 characters of that hash to the server.
The API returns hundreds of suffixes that match those 5 characters. Your browser then checks the list locally. Your actual password (and even its full hash) is never transmitted.
Related Tools
Investigation Workspace
Analyze and organize security indicators, logs, files, and timelines in one local workspace.
Interactive Playbook Builder
Design and execute structured security incident response workflows.
Sigma Rule Builder
Create portable Sigma detection rules locally for SIEM and EDR workflows.
Email Security Analyzer
Inspect email headers locally for SPF, DKIM, DMARC and phishing indicators.