Password Health Checker

Check if your password has been compromised

100% Private: Only the first 5 characters of your password hash are sent to HaveIBeenPwned API (k-anonymity).

Zero Storage: Your password is never stored anywhere. All checks happen in your browser.

Enter a password above to check its security

How It Works

1. Breach Check (HaveIBeenPwned)

Uses k-anonymity protocol - only the first 5 characters of your password's SHA-1 hash are sent to the API. Your actual password never leaves your browser.

2. Common Password Check

Compares against a local database of the most commonly used passwords and patterns.

3. Entropy Calculation

Measures password complexity based on length and character variety. Higher entropy = harder to crack.