Free IT audit
Free tool

Has Your Password Been Breached?

Check whether a password appears in known data breaches, and see roughly how long it would take a criminal to crack it.

Your password never leaves this page. Only the first five characters of its scrambled hash are sent to the breach database, which cannot work out the password from them.

The strength estimate is a rough guide based on length, character variety and common patterns. The breach check uses the free Pwned Passwords service from Have I Been Pwned (haveibeenpwned.com), licensed under CC BY 4.0, with its k-anonymity method: your browser sends only the first five characters of the password SHA-1 hash and compares the results locally. Netoja never receives your password; we count only whether the result was breached or clean, anonymously. If you are worried, check a similar password rather than your real one.