Three tools. Check your password's strength, find out if it's been exposed in a data breach, or generate a new one that will actually hold up. No data stored. No account. Free.
Type any password. We score it in real time — entropy, patterns, common words — and tell you exactly what's weak about it.
Checks against billions of known breached passwords via HaveIBeenPwned. Your password is hashed locally — only a 5-character prefix is ever sent. Your actual password never leaves your browser.
🔒 Privacy: SHA-1 hash generated in-browser. Only the first 5 characters sent to api.pwnedpasswords.com. Your password is never transmitted.
Configure your requirements, generate a cryptographically random password. Click the copy icon to grab it.