Has this password been leaked?
Check a password against hundreds of millions of leaked passwords. Your password is hashed in your browser and only the first five characters of the hash are sent, so it is never revealed to us or anyone else.
- Free, no sign-up
- Results in seconds
- Runs privately in your browser
Simple, start to finish.
Type a password
It stays on your device. We never see it.
Your browser hashes it
Only the first 5 of 40 hash characters go to the Pwned Passwords service, which returns hundreds of possible matches.
Your browser compares
The match is found on your device, so nobody learns the password.
Is it safe to type my real password here?
The check is designed for it: the password is never sent anywhere. If you're unsure, test a similar password instead.
My password was found. What now?
Stop using it everywhere, change it to a long passphrase, and turn on multi-factor authentication.
My password wasn't found. Is it strong?
Not necessarily. Not appearing in a breach list is good, but length matters most. Aim for 14 or more characters.
More free tools.
Want an expert to look at your results?
Tell us what you found. An Infinity engineer, not a salesperson, will reply within one business day.
Tell us about your IT.
We answer almost every inquiry within one business day.