Has My Password Been Leaked?
Check whether a password appears in a known data breach. Your password never leaves your device.
Your password never leaves your device. Your browser creates a fingerprint of it (a SHA-1 hash) and sends only the first 5 characters of that to the Pwned Passwords service from Have I Been Pwned. That sends back a list of all known leaked passwords that start with those 5 characters, and your browser itself checks whether yours is among them. This way, no one, not even us, can see which password you are checking. This is called k-anonymity.
You can check this yourself: open your browser's network view (F12) and look at the request that gets sent.
If your password is on the list, stop using it anywhere, even if you have since changed it elsewhere. Create a new, unique password with the Password Generator and store it in a password manager. Data from Have I Been Pwned.