Everyday problems. Solved.

Australia

Choose your country

We never redirect you automatically. Pick the version you want.

Europe

Americas

Asia

Oceania

Has My Password Been Leaked?

Type the password and press «Check»: you will see the only thing that would leave your device, 5 characters of its fingerprint. Known breaches are only searched when you press «Send», and the comparison happens here.

This is all that will be sent: ••••• to Have I Been Pwned

Safest of all: let your browser or password manager warn you about leaked passwords (Chrome, Firefox and Safari on iPhone and Mac do) without typing them on any website. And don't type passwords on sites you don't trust, this one included. Nothing is saved or logged.

Results are estimates. Solvemis accepts no responsibility for the results obtained or for how they are used.

Solvemis is free, with no sign-up. If it helped and you’d like to support the project: Buy me a coffee

How it works

How to use it

  1. Type the password you want to check.
  2. Press «Check»: you will see the 5 characters of its fingerprint that would leave your device.
  3. Press «Send to Have I Been Pwned» to run the search.
  4. Read the result: if it shows up, change it wherever you use it.

How it is calculated

Your browser turns the password into its SHA-1 fingerprint. Only the first 5 characters of the fingerprint are sent to the Pwned Passwords API of Have I Been Pwned, which returns the rest of every fingerprint that starts the same way and how many times each one appears; the comparison with yours happens in your browser. This is called k-anonymity: for example, the fingerprint of «password» starts with 5BAA6, and hundreds of different fingerprints share that start, so the service cannot tell which one is yours. The request also asks for padding: fake fingerprints with a count of 0 so that the size of the answer does not give away what was searched, which are discarded here. The whole password is needed: change one letter and the fingerprint changes completely.

Sources

About this calculator

Why only 5 characters leave your device

The SHA-1 fingerprint of a password is a 40-character code that always comes out the same for the same password and cannot be turned back into it. Only the first 5 characters of that fingerprint are sent. Hundreds of fingerprints of different passwords share that start, and the service returns them all: whoever receives the request does not know which one was yours, and the comparison happens in your browser.

Safest of all: without typing it on any website

Chrome, Firefox and Safari on iPhone and Mac, and password managers, warn you about saved passwords that show up in data breaches without you having to type them on any page. That is the safest option. And in general, don’t type passwords on sites you don’t trust, this one included.

Why this page has no ads

We removed them to reduce your risk: on a page where you type a password, we don’t load anyone else’s code. The page can only connect to Solvemis and to Have I Been Pwned, and it says so in its own code.

Frequently asked questions

Is it safe to type my password here?

The password doesn't leave your device: your browser turns it into its SHA-1 fingerprint and only the first 5 characters are sent, which hundreds of passwords share. Even so, the safest option is not to type passwords on sites you don't trust, this one included: your browser or password manager can warn you about leaked passwords without typing them on any website.

What should I do if it shows up?

Stop using it and change it everywhere you have it, starting with your email and your bank. Use a different one for each site, keep them in a password manager and turn on two-step verification.

If it doesn't show up, is it safe?

Not necessarily. It only means it isn't in the breaches that are known. It may be short or easy to guess, or have leaked without anyone knowing yet.

What is Have I Been Pwned?

An independent service that collects passwords from public data breaches so anyone can check whether theirs is among them. Its password search is free and designed to work without sending the password.

Updated 21 October 2026

Missing something in this tool, or a tool we don't have? Write to us