Check a Link
Analyze any URL for phishing risk indicators. No data is sent anywhere.
Paste the full URL including https:// or http://
Check a Password
Uses the k-Anonymity model — only the first 5 characters of your SHA-1 hash are ever sent. Your password never leaves your device.
Your password is hashed locally. Only the first 5 hex characters of the SHA-1 hash are sent to HaveIBeenPwned.
SHA-1 prefix sent:
Checking against breach database…