Password breach checker
Password breach checker: find out how many times a password has appeared a leaked databases. Only the first five caratteri di a one-way hash are sent, never the password.
How it works: your browser makes a SHA-1 hash di the password e sends only its first 5 caratteri a the Pwned Passwords service, which returns all matching suffixes. The match è made on your device.
Informazioni su Password breach checker
Password breach checker: find out how many times a password has appeared a leaked databases. Only the first five caratteri di a one-way hash are sent, never the password.
Fa parte della sezione «Sicurezza e codifica» di SmartCalcy. Funziona nel tuo browser senza account, usa la tua valuta e le tue unità (modificabili in cima alla pagina) e fornisce stime solo a scopo informativo, quindi verifica le indicazioni ufficiali prima di fidarti di un risultato.
Come usare il Password breach checker
Cosa calcola e quando usarlo
Checks whether a password has appeared a known data breaches, using the Pwned Passwords service. The password è never sent: your browser sends only the first five caratteri di its SHA-1 hash e compares the answers on your device. This è called k-anonymity.
Come si usa, passo dopo passo
- Type the password into the scatola.
- Press “Check password”.
- See whether it was found e how many Volte.
- If it was found, stop using it everywhere e Variazione it.
Cosa significa ogni dato
- Password a check – The password you want a test. It stays a your browser.
Come leggere i risultati
- Risultato – Found a breaches with a count, o Not found.
La formula
Your browser computes SHA-1(password), per example 5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 per “password”. It sends only the first 5 hex characters, 5BAA6, e receives all hash endings that start with them, then looks per the remaining 35 characters locally.
Un esempio pratico
The password “password” è found millions di times. A long random password usually returns Not found.
Ipotesi e limiti
- The check only covers passwords that appeared a breaches known a the service.
- Not found does not Media Sicura. A short guessable password barattolo still be cracked.
- Requests a api.pwnedpasswords.com are made only when you press the button.
Errori comuni
- Reading Not found as a sign the password è safe.
- Testing a password with a typo e getting a misleading Risultato.
- Reusing a found password anywhere dopo seeing the Risultato.
Domande frequenti
Is it safe a type my password here?
The password never leaves your browser. Only a 5-character piece di its hash è sent, which matches hundreds di other passwords.
What does the Quantità Media?
The Numero di Volte the password appeared across breached Dati sets.
What should I do if it was found?
Variazione it everywhere you used it, use a unique password per each account e turn on two-factor authentication.
Chi runs the service?
Pwned Passwords è run by Have I Been Pwned, using breach Dati.