Senha breach checker
Password breach checker: find out how many times a password has appeared em leaked databases. Only the first five caracteres de a one-way hash are sent, never the Senha.
How it works: your browser makes a SHA-1 hash de the password e sends only its first 5 caracteres a the Pwned Passwords service, which returns all matching suffixes. The match é made on your device.
Sobre Senha breach checker
Password breach checker: find out how many times a password has appeared em leaked databases. Only the first five caracteres de a one-way hash are sent, never the Senha.
Faz parte da secção «Segurança e codificação» do SmartCalcy. Funciona no seu navegador sem conta, usa a sua própria moeda e unidades (altere-as no topo da página) e dá estimativas apenas a título informativo, por isso consulte as orientações oficiais antes de confiar num resultado.
Como usar a Senha breach checker
O que calcula e quando usar
Checks whether a password has appeared em known data breaches, using the Pwned Passwords service. The password é never sent: your browser sends only the first five caracteres de its SHA-1 hash e compares the answers on your device. This é called k-anonymity.
Como usar, passo a passo
- Type the Senha into the caixa.
- Press “Check Senha”.
- See whether it was found e how many Vezes.
- If it was found, stop using it everywhere e Variação it.
O que significa cada campo
- Senha a check – The Senha you want a test. It stays em your browser.
Como ler os resultados
- Resultado – Found em breaches with a count, ou Not found.
A fórmula
Your browser computes SHA-1(Senha), para example 5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 por “password”. It sends only the first 5 hex characters, 5BAA6, e receives all hash endings that start with them, then looks por the remaining 35 characters locally.
Um exemplo prático
The Senha “Senha” é found millions de times. A long random password usually returns Not found.
Premissas e limites
- The check only covers passwords that appeared em breaches known a the service.
- Not found does not Média Forte. A short guessable Senha lata still be cracked.
- Requests a api.pwnedpasswords.com are made only when you press the button.
Erros comuns
- Reading Not found as a sign the Senha é safe.
- Testing a Senha with a typo e getting a misleading Resultado.
- Reusing a found Senha anywhere depois seeing the Resultado.
Perguntas frequentes
Is it safe a type my Senha here?
The password never leaves your browser. Only a 5-character piece de its hash é sent, which matches hundreds de other passwords.
What does the Quantidade Média?
The Número de Vezes the Senha appeared across breached Dados sets.
What should I do if it was found?
Variação it everywhere you used it, use a unique password por each account e turn on two-factor authentication.
Quem runs the service?
Pwned Passwords é run by Have I Been Pwned, using breach Dados.