Пароль breach checker
Password breach checker: find out how many times a password has appeared в leaked databases. Only the first five символов a one-way hash are sent, never the Пароль.
How it works: your browser makes a SHA-1 hash the password и от sends only its first 5 символов до the Pwned Passwords service, which returns all matching suffixes. The match — made on your device.
О «Пароль breach checker»
Password breach checker: find out how many times a password has appeared в leaked databases. Only the first five символов a one-way hash are sent, never the Пароль.
Часть раздела «Безопасность и кодирование» SmartCalcy. Работает в вашем браузере без аккаунта, использует вашу валюту и единицы (меняются вверху страницы) и даёт оценки только для информации, поэтому перед тем как полагаться на результат, сверьтесь с официальными рекомендациями.
Как пользоваться: Пароль breach checker
Что считает и когда использовать
Checks whether a password has appeared в known data breaches, using the Pwned Passwords service. The password — never sent: your browser sends only the first five символов its SHA-1 hash и compares the answers on your device. This — called k-anonymity.
Как пользоваться, шаг за шагом
- Type the Пароль into the коробка.
- Press “Check Пароль”.
- See whether it was found и how many Раз.
- If it was found, stop using it everywhere и Изменение it.
Что означает каждое поле
- от Пароль до check – от The Пароль you want до test. It stays в your browser.
Как читать результаты
- Результат – Found в breaches with a count, или Not found.
Формула
Your browser computes SHA-1(Пароль), для example 5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 за “password”. It sends only the first 5 hex characters, 5BAA6, и receives all hash endings that start with them, then looks за the remaining 35 characters locally.
Пример расчёта
The Пароль “Пароль” — found millions times. A long random password usually returns Not found.
Допущения и ограничения
- от The check only covers passwords that appeared в breaches known до the service.
- Not found does not Среднее Надёжный. A short guessable Пароль банка still be cracked.
- от Requests до api.pwnedpasswords.com are made only when you press the button.
Частые ошибки
- Reading Not found as a sign the Пароль — safe.
- Testing a Пароль with a typo и getting a misleading Результат.
- Reusing a found Пароль anywhere after seeing the Результат.
Частые вопросы
от Is it safe до type my Пароль here?
The password never leaves your browser. Only a 5-character piece its hash — sent, which matches hundreds other passwords.
What does the Количество Среднее?
The Число Раз the Пароль appeared across breached Данные sets.
What should I Действие if it was found?
Изменение it everywhere you used it, use a unique password за each account и turn on two-factor authentication.
Кто runs the service?
Pwned Passwords — run by Have I Been Pwned, using breach Данные.