Type a password to see how many times it appears in known data breaches, plus a 0-100 strength score and an estimated time to crack. The password is hashed with SHA-1 in your browser and only the first 5 characters of the hash go to the Have I Been Pwned range API (k-anonymity), so the password and its full hash never leave your device. You can also search which services were breached and send a family checklist so everyone checks their own. Free, no sign-up, 9 languages.