Cybersecurity · free, no signup
Password Exposure & Entropy Analyzer
A local entropy meter plus a privacy-preserving k-anonymity breach lookup — see how strong a password is and whether it has appeared in known breaches, without ever sending the password itself.
Authorized, defensive use only. Check assets you own or lawfully public data. This tool is educational and never provides another party's private data.
Your password never leaves this browser. It is measured locally. The optional breach check sends only the first five characters of its SHA-1 hash, directly to the Pwned Passwords range API — not to Solvex — and the comparison finishes here. Any report is generated from the measurements, which cannot carry the password.
What happens to what you enter
- The password is measured in your browser and is never sent to Solvex. The optional breach check sends the first five characters of a SHA-1 hash of it to the Have I Been Pwned range API, from your browser. A signed report, if you ask for one, is built from the measurements — never from the password.
- Nothing is recorded on Solvex servers when you run it — there is no input to hash.
- An email address is stored only where a tool offers to send you a report and you choose to give one.
Limits: ten runs of this tool per minute from one address, and three signed reports per minute. Past that the tool says so and tells you when to try again.
When a free check is not enough
This tool reads what is public and reports what it can see. The Identity & Access Management Audit engagement is the authorized, specialist-led version: signed scope, findings proven by hand, a signed report, and a retest.
Explore Identity & Access Management Audit