Free tool
Has my password been leaked?
Check whether a password appears in known data breaches, without the password, or even its full hash, leaving your browser.
Runs entirely in your browser. Vallkey never sees what you make or check here.
How it works
When you check, your browser computes the password's SHA-1 hash, and sends only its first five characters to Have I Been Pwned's Pwned Passwords. It answers with every breached hash that begins that way: hundreds of them. Your browser looks for the rest of your hash among them, and counts.
This is called k-anonymity: the service can't tell which of those hundreds of passwords, if any, you checked. Requests also ask for padding, so even the answer's size reveals nothing.
Vallkey's Security view does the same for every password in your vault.
Questions
Is it safe to type my password here?
Yes. Your browser hashes the password, and sends only the first five characters of the hash to Have I Been Pwned. The answer is a list of hashes that start the same way, and your browser looks for yours in it. Neither the password nor its full hash leaves your device.
What if my password was found?
Change it everywhere you use it, starting with your email and bank. Someone may already be trying it on other websites.
My password wasn't found. Is it safe?
Only that it's not in a known breach. It can still be easy to guess, or used on more than one site. A unique, random password for every site is the real fix.
Does Vallkey do this for me?
Yes. Vallkey's Security view checks every saved password the same private way, and shows you which to change.
More free tools
- Password generatorRandom passwords of any length, made in your browser with its secure random numbers. Nothing is sent anywhere.
- Passphrase generatorMemorable passphrases from EFF's long word list, the same one Vallkey's apps use, with their strength in bits.
- Strength checkerHow long your password would hold out against guessing, with the same estimator Vallkey's Security view uses. Nothing leaves your browser.
- Emergency Kit templateA page to print and fill in by hand: where your accounts are, and how the people you trust can reach them if they need to.
Let Vallkey remember them for you.
Free forever for unlimited passwords and devices. No card needed.