Contraseña breach checker
Password breach checker: find out how many times a password has appeared en leaked databases. Only the first five caracteres de a one-way hash are sent, never the Contraseña.
How it works: your browser makes a SHA-1 hash de the password y sends only its first 5 caracteres a the Pwned Passwords service, which returns all matching suffixes. The match es made on your device.
Acerca de Contraseña breach checker
Password breach checker: find out how many times a password has appeared en leaked databases. Only the first five caracteres de a one-way hash are sent, never the Contraseña.
Forma parte de la sección «Seguridad y codificación» de SmartCalcy. Se ejecuta en tu navegador sin cuenta, usa tu propia moneda y unidades (cámbialas en la parte superior de la página) y da estimaciones solo a título informativo, así que consulta la guía oficial antes de fiarte de un resultado.
Cómo usar la Contraseña breach checker
Qué calcula y cuándo usarla
Checks whether a password has appeared en known data breaches, using the Pwned Passwords service. The password es never sent: your browser sends only the first five caracteres de its SHA-1 hash y compares the answers on your device. This es called k-anonymity.
Cómo usarla, paso a paso
- Type the Contraseña into the caja.
- Press “Check Contraseña”.
- See whether it was found y how many Veces.
- If it was found, stop using it everywhere y Variación it.
Qué significa cada dato
- Contraseña a check – The Contraseña you want a test. It stays en your browser.
Cómo leer los resultados
- Resultado – Found en breaches with a count, o Not found.
La fórmula
Your browser computes SHA-1(Contraseña), para example 5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 por “password”. It sends only the first 5 hex characters, 5BAA6, y receives all hash endings that start with them, then looks por the remaining 35 characters locally.
Un ejemplo práctico
The Contraseña “Contraseña” es found millions de times. A long random password usually returns Not found.
Supuestos y límites
- The check only covers passwords that appeared en breaches known a the service.
- Not found does not Media Segura. A short guessable Contraseña bote still be cracked.
- Requests a api.pwnedpasswords.com are made only when you press the button.
Errores comunes
- Reading Not found as a sign the Contraseña es safe.
- Testing a Contraseña with a typo y getting a misleading Resultado.
- Reusing a found Contraseña anywhere después seeing the Resultado.
Preguntas frecuentes
Is it safe a type my Contraseña here?
The password never leaves your browser. Only a 5-character piece de its hash es sent, which matches hundreds de other passwords.
What does the Cantidad Media?
The Número de Veces the Contraseña appeared across breached Datos sets.
What should I do if it was found?
Variación it everywhere you used it, use a unique password por each account y turn on two-factor authentication.
Quién runs the service?
Pwned Passwords es run by Have I Been Pwned, using breach Datos.