Log inGet Vautir

Search the help center, features, guides and more.

Has my password been leaked?

Check whether a password appears in known data breaches, without the password, or even its full hash, leaving your browser.

Runs entirely in your browser. Vautir never sees what you make or check here.

How it works

When you check, your browser computes the password's SHA-1 hash, and sends only its first five characters to Have I Been Pwned's Pwned Passwords. It answers with every breached hash that begins that way: hundreds of them. Your browser looks for the rest of your hash among them, and counts.

This is called k-anonymity: the service can't tell which of those hundreds of passwords, if any, you checked. Requests also ask for padding, so even the answer's size reveals nothing.

Vautir's Security view does the same for every password in your vault.

Questions

Is it safe to type my password here?

Yes. Your browser hashes the password, and sends only the first five characters of the hash to Have I Been Pwned. The answer is a list of hashes that start the same way, and your browser looks for yours in it. Neither the password nor its full hash leaves your device.

What if my password was found?

Change it everywhere you use it, starting with your email and bank. Someone may already be trying it on other websites.

My password wasn't found. Is it safe?

Only that it's not in a known breach. It can still be easy to guess, or used on more than one site. A unique, random password for every site is the real fix.

Does Vautir do this for me?

Yes. Vautir's Security view checks every saved password the same private way, and shows you which to change.

Let Vautir remember them for you.

Free forever for unlimited passwords and devices. No card needed.