Password breach check

See if a password has appeared in a known data breach

Your password never leaves your browser. We hash it locally (SHA-1) and only send the first 5 characters of that hash to Have I Been Pwned's Pwned Passwords API — a privacy technique called k-anonymity. There's no way for anyone to reconstruct your password from that.