All tools
Security tool
Password strength & breach check
Get a practical strength estimate and safely check whether the password has appeared in public breach data.
Privacy-safe check
This page never sends the password itself. Only the first five characters of its SHA-1 hash are sent to Have I Been Pwned using k-anonymity.
Strength estimateEnter a password
Breach database
Not checked yet
Run a check against billions of leaked passwords.
Strong password habits
Use a unique 14+ character password or passphrase for every business system, store it in a password manager, and protect email and admin accounts with MFA.
If a breach returns a match, treat the password as compromised even if the estimate says “strong.”