One leak shouldn't open every account
When a site is breached, attackers try the same email and password on hundreds of other sites. If you reuse a password, one leak can unlock your email, bank and social accounts. This tool reads a password export and shows which passwords are shared between accounts, which are nearly the same, and which are weak.
How to export your passwords
- Chrome and Edge: Settings → Passwords (Google Password Manager) → Settings → Export passwords.
- Firefox: Passwords (about:logins) → ⋯ menu → Export passwords.
- Safari (macOS): File → Export → Passwords.
- Bitwarden: Tools → Export vault → .csv. 1Password, LastPass, Proton Pass: use their CSV export.
The export is a plain, unencrypted file. Delete it, and empty the trash, as soon as you're done.
Questions
Are my passwords sent anywhere?
No. The file is read in this tab and never uploaded or stored. Reloading the page clears it.
Does it check whether my passwords were leaked?
Not automatically. Use the breach check for the passwords that matter most; it sends only 5 characters of a hash.
What should I fix first?
Your email account, then banking and payments, then anything else that's reused. Turning on two-step sign-in for those helps too.