Private password check
Check whether a password has been exposed.
Compare a password against the Have I Been Pwned Pwned Passwords dataset. Your browser calculates its SHA-1 hash, sends only the first five characters to Caskveil, then checks the returned hash suffixes here.
Check a password
Your password is hashed in this browser and cleared when the check finishes.
What leaves your browser
Only a five-character hash prefix is sent to the range service. Your password and full hash stay in this tab; the matching suffix is compared locally. This check does not save the password or its result.
A missing match means only that this password was not found in the dataset checked. It does not guarantee that a password is strong or safe to reuse.