Privacy
Last updated: November 9, 2026
What you type or open
Password Leak Check works entirely in your web browser. Text, passwords, codes and files you use with the tool are processed on your device and are not sent to this site's server. The site is static files with no backend code that could receive them.
Requests the page makes
To check a password, the page sends the first 5 characters of the password's SHA-1 hash to the Pwned Passwords service at api.pwnedpasswords.com, run by Have I Been Pwned. The password and the rest of its hash never leave your browser. The request carries no cookies and no referrer. That service's own privacy policy applies to the request.
What is stored on your device
- Your theme choice (light or dark) and, where the tool has them, your last settings, in your browser's local storage.
- A copy of the site's own files, so it works offline. Nothing you enter is part of that cache.
Cookies and tracking
The site sets no cookies and uses no analytics or advertising trackers.
Server logs
Like any web server, ours may briefly log standard request details such as IP address, time and the page requested, to keep the service running and secure. These logs never contain anything you enter into the tool.