§ LoadingJust a moment
Check the strength of a password and look it up against more than a billion known leaked passwords. The password never leaves your browser. No sign-up, nothing stored.
The breach lookup uses the same trick Have I Been Pwned offers to apps that care about privacy. Called k-anonymity. It works like this.
01
Your password is turned into a one-way SHA-1 hash on your device. The original password is never sent anywhere.
02
Only the first five characters of that hash leave your browser. Nothing identifying, nothing reversible.
03
The breach database returns every hash that shares those five characters. Usually a few hundred.
04
Your browser checks the rest of the hash against the list. Match means breached. No match means clean.
The breach data comes from Have I Been Pwned, a free service run by Australian security researcher Troy Hunt. The same database sits behind 1Password, browsers' built-in password warnings, and most reputable password managers.
Found in a breach? Here is what to do
01
Change it everywhere
Anywhere you used this password, change it. Start with email and banking. A password manager makes this five minutes of work, not an afternoon.
02
Turn on two-factor
On the accounts that matter (email, banking, Microsoft 365, social). Authenticator apps are stronger than SMS. Most apps have it under Security or Sign-in.
03
Stop reusing
A unique password per account is the single biggest security upgrade most people can make. Pick a password manager and let it generate them.
If your business is exposed and you want help sorting it properly, tell us what is going on. We help with password manager setup, MFA rollouts and the boring after-work that actually stops it happening again.
§ Useful next
Got a dodgy email too? Run it through the heuristic checker.
Calm three-step first-response guide for an account compromise.
Password managers, MFA, backups: how we help businesses get the basics right.
Get in touch
Password managers, multi-factor authentication, backups that actually work. Talk to a real person and we will help you put it together without scare tactics.