Free with an account
Has this password already leaked?
Check any password against billions of leaked ones. It's hashed in your browser and never sent anywhere: not to us, and not to the breach database. Free with a ShutOut account.
Free with an account
Has this password leaked?
Check any password against billions of leaked ones. It's hashed in your browser; nobody sees it, including us.
Thirty seconds. Email and a password, nothing else required.
How this stays private
The check runs in your browser. Only a short, anonymous fragment of a one-way hash ever leaves it, so nobody, including us and the breach database, learns which password you checked or whether it matched. It's the same model password managers and major platforms use.
What the result means
Leaked once is leaked forever.
If a password appears in this database even once, attackers already have it in the lists they use for credential stuffing: trying leaked email and password pairs on every major site, automatically, millions of times an hour. "Strong" doesn't matter. Leaked matters.
If it shows a count in the thousands or millions, it is a common password and gets guessed in seconds regardless of any breach.
What to do about a leaked password is in your account, next to the email breach lookup and the rest of the kit.
Begin
One leaked password is a clue, not a verdict.
A Lockdown finds the rest of the doors and closes them with you.