Enter password
Checking
●
—
—
Request details
sha-1
—
prefix
—
Awaiting request ...
Check history
No checks yet. Start checking passwords!
Premium plans
Basic1k requests / mo$3,99
Pro10k requests / mo$14,99
Enterprise100k requests / mo$39,99
CustomUnlimitedContact

Cspace API provides real-time password breach detection using the k-anonymity model.

Each request sends only the first 5 characters of a SHA-1 hash — the full password never leaves your device. The API returns a list of matching hash suffixes with occurrence counts from 9B+ compromised records from different databases.

Frequently asked questions
How does Compromise.space check my password? ▼
We use a zero-knowledge model. Your password is hashed locally in your browser, and only the first 5 characters of the SHA-1 hash are sent to our API. The full password never leaves your device.
Is my password stored or logged? ▼
No. We do not store, log, or transmit your password. All processing happens in your browser. We never see your actual password.
What does the number next to the hash mean? ▼
The number indicates how many data breaches contain that specific password hash. The higher the number, the more compromised the password is.
How many records are in the database? ▼
Our API aggregates data from multiple sources — currently over 9 billion compromised records across thousands of known data breaches.
Is there a free version? ▼
Yes! Every user gets unlimited free checks. No registration required. For higher volume API access, check our Premium plans on the API tab.
How accurate is the check? ▼
The API uses data from multiple breach databases with over 9 billion records. The check is as accurate as the data sources — we match exact password hashes.
@compromise_space
Support · Billing · Feature requests
Compromise.space · The ZK algorithm
Terms Privacy
SHA-1 · Breached passwords