Password check
Is this password in known data leaks?
The check runs entirely in your browser. Your password is not transmitted to us, not stored and not logged.
Technologyk-anonymity: only 5 hash characters
Local check
Enter password.
This field is no sign-in required. Only enter a password here that you want to check – not your login details for the customer area.
How it works
- 1. Hash
- Your browser generates a SHA-1 hash from the password.
- 2. Prefix
- Only the first five characters of the hash are sent to api.pwnedpasswords.com sent.
- 3. Response
- The service returns all hash suffixes with this prefix (several hundred).
- 4. Comparison
- Your browser checks locally whether your hash suffix is among them. Neither we nor the service learn your password.
Data source: Pwned Passwords (Have I Been Pwned). A negative result only means that the password is not contained in the leaks recorded there – still use a separate, long password for every service and a password manager.
Go further
Also check e-mail address and findings.
In the free Initial check you can see whether your e-mail address appears in known leaks and where your data is publicly listed.
Check for free