Free tool
Breached Password Check
Find out whether a password has appeared in a known data breach, without sending the password anywhere.
Your password never leaves your browser. Only the first 5 characters of its SHA-1 fingerprint are sent to Have I Been Pwned, which can't work out the password from them. Have I Been Pwned also sees your IP address, as with any web request. This page stores nothing.
Breach data from Have I Been Pwned (Pwned Passwords, licensed under CC BY 4.0).
Passwords are only one layer
If you'd like help with sign-in security across your team, tell us roughly how many people you have. We usually respond same day.