Find out if your password has already been caught.
PassRadar checks any password against known data breaches and scores its strength — entirely in your browser. Nothing you type ever leaves your device.
Only a 5-character hash fragment is sent for the breach check — your real password stays local. See how.
Breach status
—
Strength score
—
Need a strong replacement?
Generate a random password locally, using your browser's cryptographic random number generator. Nothing here touches the network either.
Click generate to create one
How PassRadar works
- Hash locally. Your password is turned into a SHA-1 hash inside your browser using the Web Crypto API — it never leaves your device.
- Send a fragment. Only the first 5 characters of that hash go to the Have I Been Pwned API. This is called k-anonymity: the API can't tell which password you're checking.
- Match locally. The API returns every hash sharing that fragment, and PassRadar checks for your exact match right here in the browser.