Has My Password Been Leaked?

Check whether a password has appeared in known data breaches using Have I Been Pwned's privacy-safe lookup. Your password never leaves your device.

Tip from Tink: If it's been leaked, change it everywhere you used it.

How this stays private: your password is turned into a SHA-1 fingerprint on your device. Only the first 5 characters of that fingerprint are sent to Have I Been Pwned, which replies with every match starting that way. The final check happens on your device, so your password never leaves it.

How to use the Has My Password Been Leaked?

Type the password.
Press Check.
Only a 5-character fingerprint fragment is sent.

Everything runs in your browser. Nothing you enter is uploaded.