MSRXTools / Passwords
Breached password check
Has this password appeared in a data breach? Uses k-anonymity: only the first 5 characters of its SHA-1 hash are sent.
Browser + k-anonymity API
Loading tool…
Good to know
- This checks the password, not your email address.
- Have I Been Pwned holds over 900 million real passwords from breaches. A hit means attackers already have it in their lists.
- The request is padded, so even its size does not reveal which hash you were checking.
Related tools
Password strength checker
Estimates how long a password would survive a real cracking attempt, and why. Your password never leaves this page.Password & passphrase generator
Strong random passwords, PINs and memorable passphrases from your browser's cryptographic random generator.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.
Estimates how long a password would survive a real cracking attempt, and why. Your password never leaves this page.Password & passphrase generator
Strong random passwords, PINs and memorable passphrases from your browser's cryptographic random generator.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.