Launching today
Pwned Password Check
Check if a password leaked, without it leaving your device
1 follower
Check if a password leaked, without it leaving your device
1 follower
Type a password to see how many times it appears in known data breaches, plus a 0-100 strength score and an estimated time to crack. The password is hashed with SHA-1 in your browser and only the first 5 characters of the hash go to the Have I Been Pwned range API (k-anonymity), so the password and its full hash never leave your device. You can also search which services were breached and send a family checklist so everyone checks their own. Free, no sign-up, 9 languages.
Hi Product Hunt! We're a small team that builds free, single-purpose web tools.
A password breach check shouldn't ask you to trust the site with your password, so this one does the whole check in the browser:
1) Your password is hashed with SHA-1 on your device.
2) Only the first 5 characters of that hash are sent to the Have I Been Pwned Pwned Passwords range API.
3) The API returns every hash that starts with those 5 characters, and the match is made locally.
The strength score (0-100) and the time-to-crack estimate are computed on your device too. The family checklist stores only the name you type and a status (Safe / Will change / Changed), never a password, hash or score.
It's free with no sign-up and available in 9 languages. If you check a password and it shows up in a breach, change it everywhere you reused it. Feedback on the wording or the strength tips is very welcome.