HackProof
Private by design · Free safety check

Know what to secure next.

Check whether a password appears in known breach data, review the protections on your important accounts, and leave with a prioritized plan. No sign-up. No inbox connection.

Start my safety check See how privacy works

HackProof reduces risk; it cannot guarantee that an account or device is secure.

No accountNothing to sign up for
No mailbox accessWe never read your messages
No password uploadHashing happens in your browser

Your private safety check

Five questions. One useful plan.

Your answers stay in this tab and disappear when you close or reload it. We use them only to build the plan shown below.

Don’t enter secrets. This check never asks for an email address, account name, recovery code, or password.
1 Do your important accounts each have a unique password?
2 How is your primary email protected beyond its password?
3 Could you recover your primary email if your phone disappeared today?
4 Do your phone and computer install security updates automatically?
5 Have you checked whether your email or passwords appeared in known breach data?

Known-exposure check

Has this password appeared in breach data?

Your browser turns the password into a SHA-1 hash, sends only the first five characters of that hash to the Have I Been Pwned Pwned Passwords service, and compares the answer locally. The password and full hash never leave your device.

Submit only when the full password is entered. We do not check while you type.

Email exposure

Check your email without giving it to HackProof.

We hand you directly to Have I Been Pwned’s browser search. You enter your address there—not here—so HackProof never receives it.

Continue to Have I Been Pwned

How privacy works

Small data surface. Clear boundaries.

01

Processed in this tab

Your questionnaire answers and resulting action plan. They are not saved to local storage or sent to HackProof.

02

Sent to HIBP

Only a five-character SHA-1 prefix after you submit a password check. HIBP may see normal connection data such as your IP address.

03

Never requested

Mailbox access, OAuth tokens, recovery codes, message bodies, attachments, or the identity of the account that uses a password.

Technical details and evidence are listed on our sources page. Read the full privacy notice.

Calm next steps

Help for the moment you’re in.

Email exposureWas my email in a breach?

Understand what a match means and what to change first.

 Suspicious messageIs this email phishing?

Inspect it safely without pasting private content into HackProof.

 Primary accountHow to secure Gmail

Use Google’s own tools to review access and recovery.

 Urgent recoveryAfter an account takeover

Contain the problem and protect connected accounts.
No checkout is active.

This safety check is free. HackProof does not link to or operate a checkout. A paid offer must not return unless a specific deliverable and its fulfillment path are independently proven.