How did it get there?
A service may have been attacked and its database published. It does not have to be a website where you use the password today.
[ What am I trying to solve? ]
Is my password still safe?
Check whether it has appeared in known data breaches. The check takes just a few seconds and your actual password stays on your device.
[ Tool ]
Check your password.
Enter the full password. We will only run the check after you click the button.
Result
[ Understand ]
Found in a breach does not mean someone has just hacked your account.
It means the same password was found in leaked databases in the past. From that point on, attackers may know it too.
Reusing passwords is the problem
Attackers automatically try leaked combinations on other services. This is called credential stuffing.
`Password123` → `Password124` is not enough
Automated attacks can try predictable variations. You need a new, genuinely unrelated password.
[ Take action ]
We found your password. What now?
Do not wait for someone to use it. Start with your most important accounts.
- 01
Change it everywhere
Start with email, banking and accounts that can be used to recover access to others.
- 02
Give each service a unique password
Do not use even a small variation of your original password.
- 03
Enable MFA or a passkey
A second layer of protection significantly reduces the risk of misuse.
- 04
Use a password manager
You do not have to remember dozens of different passwords. A password manager will do it for you.
[ How we protect your password ]
We send only a small part of your password's hash.
Your password
••••••••••••Stays in your browserSHA-1 hash
21BD1…Only the first 5 characters are sentComparison
hundreds of responsesOnly your browser identifies a matchThe check uses the Pwned Passwords database from Have I Been Pwned (opens in a new tab) using the principle of k-anonymity.
[ BOIT tools ]
Tools are useful. Knowing what you are doing is even better.
That is why our tools do more than check or generate something. We want you to come away with a little more understanding of how to protect yourself online.
We are building #BezpečnějšíČesko.