Private password check
Password leak checker
Check whether a password has appeared in known leaked password datasets. The checker uses k-anonymity: your password is hashed locally, and the plaintext password is never sent to EmailLeaked.
verified_user
Local hashing
Your browser hashes the password before checking it.
verified_user
K-anonymity
Only the first five characters of the SHA-1 hash prefix are sent for lookup.
verified_user
No plaintext password
The actual password is not transmitted to EmailLeaked.
verified_user
Immediate action
If the password appears in breach data, stop using it everywhere.
When should you check a password?
- Before reusing an old password anywhere.
- After your email appears in a breach.
- When a company sends a password reset notice.
- When you are cleaning up old accounts and password manager entries.
What to do if it was leaked
- Change the leaked password on every account where it was reused.
- Use a password manager to generate unique passwords.
- Enable two-factor authentication on email, banking, shopping, and social accounts.
- Check login history on important accounts for suspicious access.
Best practice
Do not try to memorize dozens of complex passwords. Use a password manager, create one unique password per account, and protect the password manager itself with a strong master password and two-factor authentication.