Has your password shown up in a known data breach? Type it below and find out. Your password never leaves this page.
How this stays private. Your browser turns the password into a fingerprint (a SHA-1 hash) on your device. Only the first 5 characters of that fingerprint are sent to the “Have I Been Pwned” database; the fingerprint’s other 35 characters never leave your browser, and the full password never leaves it either. The matching happens right here, on your device. Nothing is logged or stored.