Credential Checker

Rate a password's strength and check it against known breaches — without ever sending the password.

Your password never leaves this page in a usable form. The breach check hashes it with SHA-1 in your browser and sends only the first 5 characters of that hash to Have I Been Pwned, which returns many candidates to compare locally (k-anonymity). Everything else runs offline.