Curious whether a password is in a record of data breaches?

Please enter a password above and click Check. No passwords entered are saved or transmitted.

The Cybersecurity Team Password Recommendations

We strongly suggest using a pass-phrase of at least 20 characters that will be both secure and easy to remember. 

Here are guidelines for creating a passphrase:

  • Use words that are relevant to you
  • Use a phrase or title from something you like, like a song or book
  • Use abbreviations or acronyms
  • Make the passphrase at least 20 characters long
  • Include uppercase letters, numbers, and punctuation/special characters
  • A combination of two or more passwords you already know can be easier to remember

Here are some example passphrases that may help you build your own memorable passphrase:

  • My #1 doggo loves popcorn!
  • D-Broncos dominate in '26
  • Sasha-Bertie-Frank 4610
  • The#1 clay pigeon master
  • Petunia, Dahlia, & Impatient 123
  • My Fat cat 8 the neighbor's dog

For the curious, we thought we would leave a little explanation here on how this tool actually functions. This gets a little technical, but nothing too painful.

When a password is entered into the tool, a hash of that password is generated. We take the first 5 characters of that hash and send them over an encrypted API request to the service Have I Been Pwned. Have I Been Pwned then responds with all the password hashes in its database that begin with the same 5 characters we sent. A comparison of those values is then done locally, and if a match is found we can see how many times that password has been seen in previous leaks.

If you want an even deeper look, check out the Github!

Have I Been Pwned is a website and tool for checking to see if your email address has been seen in any of the numerous data leaks that happen so often. They also provide a service to check and see if a password you use has been seen in any of those leaks. They are a trusted and well respected source on the latest data leaks, and are constantly updating their database.