Check a password or an email domain
Worried a password has leaked, or that someone could send emails pretending to be a business you deal with? Run a check here. Each one is a single check, not a full security assessment.
Has this password appeared in a data breach?
Type a password to see whether it's in the Pwned Passwords list of passwords exposed in known data breaches, from Have I Been Pwned.
Only the first 5 characters of a scrambled (hashed) version of the password leave your device. The password itself isn't sent, saved or logged, and the box is cleared after each check.
My account's been hacked? Our kit for this: Account Lockdown Kit
Could someone fake emails from this domain?
A fake supplier email can look like it comes from a real company's address. Enter a domain, such as your own or a supplier's. See whether it publishes SPF, DKIM and DMARC, the records that help receiving email servers spot fakes.
The domain name you enter is sent to Cloudflare's public DNS service to look up its records. Your browser sends these lookups straight to Cloudflare. Nothing is sent to Secordit.
Supplier says their bank details changed? Our kit for this: Bank Details Changed?
Not sure where to start? Our kit for this: Small Business Cyber Starter Checklist
About these checks
The password check uses the Pwned Passwords service from Have I Been Pwned. The domain check uses Cloudflare's public DNS-over-HTTPS service. Independent services, not connected to Secordit.