Check a password against the Pwned Passwords corpus after an explicit click. A no-match is not a safety guarantee.
Check a password against the Pwned Passwords corpus after an explicit click. A no-match is not a safety guarantee. Enter the complete password exactly as intended; short input and spaces are preserved. Click Check to send only its first five hexadecimal SHA-1 characters and request a padded response. Read the checked-range result. An error or unavailable response is not a no-match. Editing the input or selecting Clear cancels the check and removes its previous result. Only after you click Check, the tool sends a five-character SHA-1 prefix to Pwned Passwords and compares the remaining hash locally. The provider sees your connecting IP address.