Check your own exposure
A privacy-first tool to see if your own password has appeared in known data breaches — plus a strength meter and secure generator.
🛡️ Privacy by design: Your password is hashed in your browser with SHA-1, and only the
first 5 characters of the hash are ever sent (k-anonymity). The full password never leaves your device.
Powered by the free Pwned Passwords range API.
Breach check
Generator
Email guidance
Strength: — · estimated entropy: 0 bits
How it works: we compute SHA1(password), send the first 5 hex chars to the range API, and compare returned suffixes locally.