🔑

Password Compromise Checker

Check if your password has appeared in a known data breach. Uses k-anonymity - your full password never leaves your browser.

Enter password to check

How k-anonymity protects your password

1.Your browser hashes your password locally using SHA-1 via Web Crypto API.

2.Only the first 5 characters of the hash are sent to Have I Been Pwned.

3.HIBP returns all hash suffixes matching that prefix - thousands of results.

4.Your browser compares your full hash locally. The full hash is never transmitted.

Open DevTools → Network tab and watch while checking. You will see a request to api.pwnedpasswords.com with only a 5-character hash prefix. Your password never appears.

Check your full digital exposure

The Digital Identity Exposure Score checks your exposure across data breaches, data brokers, and paste sites - all in one place.

Check Exposure →

Password breach data is provided by the Have I Been Pwned API (haveibeenpwned.com) under the Acceptable Use Policy. TrustScan does not store, log, or transmit any password you enter. All hashing occurs locally using the Web Crypto API. Strength scoring is based on character entropy and pattern analysis.

🔑

Loading Password Checker...