computing.id

Password Breach Checker

Check whether a password has appeared in public data breaches, without sending the actual password.

Your password is never sent to any server. Your browser computes the SHA-1 hash locally and only sends its first 5 characters (k-anonymity) to the Have I Been Pwned API for matching.

About Password Breach Checker

Password Breach Checker tells you whether a password has appeared in a public data breach. It uses the k-anonymity method: only the first five characters of the password's SHA-1 hash are sent, and the rest is matched on your side, so the actual password never leaves your browser. If your password appears in a breach, anyone can try it in a credential stuffing attack - change it immediately and never use it anywhere again.

How to use

  1. 1 Enter the target you want to check (a domain, IP address, or URL) in the field provided.
  2. 2 Click the run button - the request is processed on Computing ID servers and the results are shown in the panel.
  3. 3 Read the results; copy the parts you need, or change the input and run it again to compare.

Free tools from Computing ID

Password Breach Checker is one of dozens of network, security, and developer utilities provided free of charge by Computing ID (PT Intprism Computing Technology). Every tool can be used without creating an account or logging in. For tools that run entirely in the browser, your data is never sent to our servers; for tools that need to call a server (such as a DNS lookup or SSL check), only the target you enter is processed, and it is not stored. If you need infrastructure to run your own services, Computing ID also offers Linux and Windows VPS, cPanel hosting, email hosting, S3 Object Storage, WireGuard VPN, and domain registration, with data centers in Indonesia and Singapore and 24/7 technical support.