Has my password been leaked?

Check whether a password appears in the 900+ million passwords exposed in data breaches. It is hashed on your device and only the first 5 characters of the hash are sent (k-anonymity), so no one — not even us — sees it.

Uses the free Pwned Passwords range API by Have I Been Pwned. Your password and its full hash never leave this page.

Found? Change it everywhere

Any account using a leaked password can be taken over by "credential stuffing" bots.

Use a password manager

Bitwarden, 1Password or your browser's built-in manager can create a unique password per site.

Turn on two-step login

An authenticator app stops most account takeovers even when a password leaks.