Check whether email addresses or personal information appear in a data breach with F-Secure’s checker.
Have I Been Pwned Passwords
Have I Been Pwned publishes a corpus of previously breached passwords so services can check and block passwords that appear in known breaches.
About Have I Been Pwned Passwords
Have I Been Pwned Passwords is a web service that provides a corpus of passwords previously exposed in data breaches. It lets anyone check whether a specific password has appeared in known breaches. The corpus is made freely available to help services block reuse of exposed passwords.
You can enter a password in the search box to see if it is indexed and how many times it has been seen. Developers can integrate the check into applications through an API or download the full corpus with the open source downloader to run checks offline. Checks use k-anonymity: the password is hashed locally and only the first 5 characters of the SHA-1 hash are sent, with comparison done on your side.
The service suits individuals reviewing their own passwords and developers or service operators who need to check user passwords against breached datasets, including for NIST-related password guidance.
Key features
- Check if a password appeared in known data breaches
- API access to integrate password checks into applications
- Download full corpus to run checks offline
- K-anonymity check sends only first 5 hash characters
Best for: Individuals checking their passwords and developers blocking breached passwords in services.
Good for
- Free to use for everyone
- Full password is not sent during checks
- Offers both API and offline download options
Watch out for
- No match does not mean a password is strong
- Support requires Pro or High RPM subscription
Have I Been Pwned Passwords at a glance
- Website
- haveibeenpwned.com/Passwords
- Category
- Privacy & Security › Breach & Phishing Checks
- Type
- Website
- Pricing
- Free
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Have I Been Pwned Passwords alternatives
Tools and sites you could use instead, ranked by how closely they match.
Use Mozilla Monitor tools to check exposed personal information and learn how to respond to breaches.
Open source
24 alternatives
NeoDevHost publishes an ad-blocking hosts list, with repository topics indicating support for tools such as AdAway and Pi-hole.
Open source
24 alternativesPopular in Breach & Phishing Checks
Well-known listings from the same topic.
Phish Reportphish.reportTrufflehogtrufflesecurity.comPhishStatsphishstats.infoisitPhishingisitphishing.orgOpenPhishopenphish.comPhishstats API Networkgithub.com/eschultze/phishstats-api-network
Have I Been Pwned Passwords FAQ
How do I check if my password has been breached?
Enter the password in the search box on the page. The service reports whether it was found and how many times it has been seen in data breaches.
Is Pwned Passwords free?
Yes, Pwned Passwords is free and open source for everyone to use. Support for using or integrating it is included with Pro and High RPM subscriptions.
How does Pwned Passwords protect privacy during checks?
Your password is hashed locally and only the first 5 characters of the SHA-1 hash are sent to the service. The full comparison happens on your side.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.