Password Checker
CarmenThis tool was created to help verify the strength of employees' passwords, in order to flag if they are weak or compromised.
The service never sends your actual password. Instead, it uses k-anonymity to check if your password has been exposed in data breaches: Client-Side Hashing: Your password is hashed locally (SHA-1) on your device. Only the first 5 characters of the hash are sent to the server. Server Response: The server returns a list of all known breach-leaked hashes that start with those 5 characters. Your full hash is compared locally against the list (no transmission). Result: You learn if your password was exposed without revealing it to the service or the network. Why It’s Safe: ✅ No plaintext passwords are sent. ✅ No full hash leaves your device. ✅ Open-source and widely trusted (used by security experts).