Privacy

This site sets no cookies, stores nothing on your device, uses no analytics and shows no advertising.

QR code checker: the camera image and any photo you choose are processed in your browser and never uploaded. The checker makes no lookups.

Password checker: the strength estimate runs in your browser. The password never leaves your device. The leak check sends only the first 5 characters of its SHA-1 hash to Have I Been Pwned, not the password or its full hash.

When you run the leak check, your browser contacts api.pwnedpasswords.com directly. Like any web request, that service sees your IP address and browser type. The request asks for a padded response, so its size reveals less. Not affiliated with or endorsed by Have I Been Pwned.

Our hosting provider (Cloudflare) processes technical data such as IP addresses to deliver the site and keep it secure.