Has my password been leaked?

How does it work?

We use Troy Hunt's Pwned Passwords range API with k-anonymity. In short:

1. Your browser computes the SHA-1 hash of your password locally.
2. Only the first 5 characters of the hash are sent to the API.
3. The API returns ALL hashes with the same 5-character prefix (typically ~500 matches).
4. Your browser checks locally whether your full hash is in the list.

Privacy

Neither antivirus-vergleich.ch nor HaveIBeenPwned ever sees your password or its full hash. Nothing is stored, logged, or analysed. Source: haveibeenpwned.com/Privacy.

My password was leaked – what now?

1. Change it immediately everywhere you used it (email, banking, cloud first).
2. Pick a unique new password per account – easiest with a password manager.
3. Enable 2FA on every important account – then a leaked password alone is worthless.