CyberNew

Has My Password Been Leaked?

Check a password against billions of leaked ones. Only a 5-character fingerprint prefix is ever sent. Runs entirely in your browser, nothing is stored.

How this works

Your browser turns the password into a SHA-1 fingerprint. Only the first 5 characters of that fingerprint are sent to Have I Been Pwned, which returns hundreds of matching fingerprints (padded with decoys). Your browser compares them locally.

What we never see

The password, and the full fingerprint, never leave this device. Nothing is logged or stored, by us or by HIBP.

Password to check

Need more than a free tool?

Qawex builds, secures and grows websites and systems. Talk to a person.

Browse services

Related tools

All tools

Cyber

Password Generator

Strong random passwords with a strength meter. Generated on your device, never sent anywhere.

Open Cyber

Hash Generator

SHA-1, SHA-256, SHA-384 and SHA-512 hashes, computed in your browser.

Open Cyber

JWT Decoder

Read a token's header, payload and expiry. Decode only, nothing leaves your browser.

Open Cyber

Password Strength Tester

See how long a password would take to crack, with feedback. Everything stays on your device.

Open