Check if a password was exposed

Check whether a password appears in Pwned Passwords. Hashing and matching happen in your browser; only a five-character hash prefix is sent.

Email checks require JavaScript to verify ownership before showing private results. A breach match is historical dataset evidence, not proof of current account access or your exact password. No results is not proof of safety.