Password Breach Checker
Check if your password has appeared in known data breaches.
🔒 Your password never leaves your browser. Only the first 5 characters of its SHA-1 hash are sent to the HIBP API (k-anonymity model).
Powered by Have I Been Pwned
Related tools
AES Encryption
Encrypt and decrypt text with AES-GCM and a passphrase, fully in your browser. Uses PBKDF2 key derivation and the Web Crypto API — your data and keys never leave your device.
Basic Auth Generator
Generate an HTTP Basic Authentication header from a username and password. Produces the Authorization header and ready-to-use curl and fetch snippets. Runs fully client-side.
Bcrypt Generator & Verifier
Hash passwords with bcrypt and verify hashes — choose your cost factor (rounds 4–15), get a secure hash instantly, and check whether a password matches a hash. Runs entirely in your browser.
CORS Header Validator
Validate Cross-Origin Resource Sharing headers for security compliance
CORS Policy Builder
Build CORS response headers, Nginx directives, and JavaScript fetch examples for safe cross-origin requests and preflight handling
CSP Builder
Visual Content Security Policy generator. Build secure CSP headers with an interactive UI, preview policies, and export for Nginx, Apache, and Next.js.