ES EN

PasswordSecure.org

Pwned Password Checker

Check if your password is strong and whether it has been leaked online.

{{ opt.label }} {{ opt.desc }}

{{ strengthLabel }}

{{ entropy }} bits
{{ error }}
{{ phraseMath }}

{{ phraseStrengthLabel }}

{{ phraseEntropy }} bits
{{ pwd }}

{{ t.historyTitle }}

{{ t.historyWarning }}

{{ t.noHistory }}

{{ item.pwd }} {{ item.date }}

{{ auditLabel }}

{{ calculateAudit.entropy }} bits

{{ t.timeToCrack }}: {{ crackTime }}

{{ pwnedCount > 0 && pwnedChecked ? t.pwnedOverride : t.crackAssumption }}

  • {{ auditFeedback.warning }}
  • {{ s }}

{{ t.pwnedErrTitle }}

{{ t.pwnedErrDesc }}

{{ t.pwnedYesTitle }}

{{ t.pwnedYesDesc.replace('{n}', pwnedCount.toLocaleString(lang)) }}

{{ t.pwnedNoTitle }}

{{ t.pwnedNoDesc }}

{{ t.checking }}

Frequently asked questions about the checker

What is PasswordSecure.org?

PasswordSecure.org is your online tool to generate secure and strong passwords. We also offer a free strength checker to evaluate how secure your current passwords are.

Why use a password checker?

Using a password checker is essential to ensure your passwords are not only strong but also uncompromised. You can verify if they have been exposed in known data breaches.

How does the password checker work?

Our checker works by cross-referencing your password hash against the HaveIBeenPwned database. If found, it indicates your password was exposed in a breach.

Why does the checker report fewer bits than the generator?

Because they do not have the same information. The generator knows how it built the password: it knows the exact character set it drew from, so its figure is exact. The checker only sees the final text and has no idea where it came from, so it has to infer strength from what is visible. If your 16-character password happened to contain no digits, it cannot guess that digits were allowed: it counts 84 possible characters instead of 92 and reports slightly fewer bits. When it cannot know, it prefers not to inflate the result rather than give you a false sense of security.

Which of the two figures should I trust?

Neither one is wrong. The generator is exact because it knows the draw it made; the checker is an estimate made without that information. For a password you just created here, go with the generator. The checker is built for the passwords you already use, whose origin nobody knows: that is why it also looks for patterns the generator never produces (dictionary words, dates, keyboard runs) and discounts them from the result.

Is my password data safe?

Yes. Your passwords are hashed locally in your browser. We only send the first 5 characters of the hash (K-Anonymity) to the database. We do not store or share your passwords.

What should I do if my password is compromised?

Change the password immediately on all accounts where you used it. Use our password generator to create a safe alternative.

Why should I check my passwords regularly?

Even a strong password can become compromised due to third-party data breaches. Checking regularly helps you stay ahead of security threats.
Need a new, secure password? Use our Password Generator.

Terms of use: By using PasswordSecure.org, you agree to our terms of use. Our service is provided "as is" without warranties. Please ensure you use the tool responsibly.