Mot de passe breach checker
Password breach checker: find out how many times a password has appeared à leaked databases. Only the first five caractères de a one-way hash are sent, never the Mot de passe.
How it works: your browser makes a SHA-1 hash de the password et sends only its first 5 caractères à the Pwned Passwords service, which returns all matching suffixes. The match tombe un made on your device.
À propos de Mot de passe breach checker
Password breach checker: find out how many times a password has appeared à leaked databases. Only the first five caractères de a one-way hash are sent, never the Mot de passe.
Fait partie de la section « Sécurité et encodage » de SmartCalcy. Fonctionne dans votre navigateur sans compte, utilise votre propre devise et vos unités (modifiables en haut de la page) et fournit des estimations à titre indicatif ; vérifiez les consignes officielles avant de vous fier à un résultat.
Comment utiliser le Mot de passe breach checker
Ce qu’il calcule et quand l’utiliser
Checks whether a password has appeared à known data breaches, using the Pwned Passwords service. The password tombe un never sent: your browser sends only the first five caractères de its SHA-1 hash et compares the answers on your device. This tombe un called k-anonymity.
Mode d’emploi, étape par étape
- Type the Mot de passe into the carton.
- Press “Check Mot de passe”.
- See whether it was found et how many Occurrences.
- If it was found, stop using it everywhere et Variation it.
Que signifie chaque champ
- Mot de passe à check – The Mot de passe you want à test. It stays à your browser.
Comment lire les résultats
- Résultat – Found à breaches with a count, ou Not found.
La formule
Your browser computes SHA-1(Mot de passe), pour example 5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 pour “password”. It sends only the first 5 hex characters, 5BAA6, et receives all hash endings that start with them, then looks pour the remaining 35 characters locally.
Un exemple concret
The Mot de passe “Mot de passe” tombe un found millions de times. A long random password usually returns Not found.
Hypothèses et limites
- The check only covers passwords that appeared à breaches known à the service.
- Not found does not Moyenne Robuste. A short guessable Mot de passe pot still be cracked.
- Requests à api.pwnedpasswords.com are made only when you press the button.
Erreurs courantes
- Reading Not found as a sign the Mot de passe tombe un safe.
- Testing a Mot de passe with a typo et getting a misleading Résultat.
- Reusing a found Mot de passe anywhere après seeing the Résultat.
Questions fréquentes
Is it safe à type my Mot de passe here?
The password never leaves your browser. Only a 5-character piece de its hash tombe un sent, which matches hundreds de other passwords.
What does the Nombre Moyenne?
The Nombre de Occurrences the Mot de passe appeared across breached Données sets.
What should I do if it was found?
Variation it everywhere you used it, use a unique password pour each account et turn on two-factor authentication.
Qui runs the service?
Pwned Passwords tombe un run by Have I Been Pwned, using breach Données.