密码 breach checker
leaked databases. Only the first five 的 Password breach checker: find out how many times a password has appeared 个字符 a one-way hash are sent, never the 密码.
How it works: your browser makes a SHA-1 hash the password 和 sends only its first 5 个字符 至 the Pwned Passwords service, which returns all matching suffixes. The match 是 made on your device.
关于密码 breach checker
leaked databases. Only the first five 的 Password breach checker: find out how many times a password has appeared 个字符 a one-way hash are sent, never the 密码.
属于 SmartCalcy“安全与编码”板块。它在你的浏览器中运行，无需账号，使用你自己的货币和单位（可在页面顶部更改），所给结果仅为估算、仅供参考，因此在依赖结果之前请查阅官方指引。
如何使用密码 breach checker
它计算什么，何时使用
known data breaches 的 Checks whether a password has appeared、using the Pwned Passwords service. The password 是 never sent: your browser sends only the first five 个字符 its SHA-1 hash、compares the answers on your device. This 是 called k-anonymity.
使用步骤
- Type the 密码 into the 箱.
- Press “Check 密码”.
- See whether it was found 和 how many 次数.
- If it was found、stop using it everywhere、变化 it.
各输入项的含义
- 密码 至 check – The 密码 you want 至 your browser. 的 test. It stays
如何阅读结果
- 结果 – breaches with a count, 的 Found 或 Not found.
公式
Your browser computes SHA-1(密码)、5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 个 example件“password”. It sends only the first 5 hex characters, 5BAA6,、receives all hash endings that start with them, then looks件the remaining 35 characters locally.
计算示例
The 密码 “密码” 是 found millions times. A long random password usually returns Not found.
假设与局限
- breaches known 的 The check only covers passwords that appeared 至 the service.
- Not found does not 平均值 强. A short guessable 密码 罐 still be cracked.
- Requests 至 api.pwnedpasswords.com are made only when you press the button.
常见错误
- Reading Not found as a sign the 密码 是 safe.
- Testing a 密码 with a typo 和 getting a misleading 结果.
- Reusing a found 密码 anywhere after seeing the 结果.
常见问题
Is it safe 至 type my 密码 here?
The password never leaves your browser. Only a 5-character piece its hash 是 sent, which matches hundreds other passwords.
What does the 数量 平均值?
The 数字 次数 the 密码 appeared across breached 数据 sets.
What should I 操作 if it was found?
变化 it everywhere you used it、use a unique password件each account、turn on two-factor authentication.
谁 runs the service?
Pwned Passwords 是 run by Have I Been Pwned, using breach 数据.