Runs in your browser
Check a password against breach data
Optional Pwned Passwords check using k-anonymity.
Neither the full password nor full hash is sent. The field is cleared after the check. This online function uses the independent Have I Been Pwned service.
How to use the result
Treat warnings as reasons to pause and verify through an independent official channel. A lack of warnings is not permission to sign in, pay, or install software.
What not to enter
Never enter one-time codes, full bank account data, identity document numbers, recovery codes, or a password—except in the optional k-anonymity tool, which clearly explains its external request.