{"id":212,"date":"2026-08-21T14:09:08","date_gmt":"2026-08-21T14:09:08","guid":{"rendered":"https:\/\/netguide.io\/tools\/passwort-leak-check\/"},"modified":"2026-08-21T14:09:08","modified_gmt":"2026-08-21T14:09:08","slug":"passwort-leak-check","status":"publish","type":"post","link":"https:\/\/netguide.io\/tools\/de\/passwort-leak-check\/","title":{"rendered":"Passwort-Leak-Check"},"content":{"rendered":"<div id=\"netgu-1136239400\" class=\"netgu-before-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"3494115342\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<style>\n.wp-pwn-container { max-width:100%; background:#fff; padding:20px; border:1px solid #ddd; border-radius:10px; font-family:-apple-system, sans-serif; color:#333; }\n.wp-pwn-title { margin:0 0 15px 0; color:#2271b1; font-size:1.4rem; }\n.wp-pwn-grid { display:grid; grid-template-columns:repeat(auto-fit, minmax(140px, 1fr)); gap:12px; margin-bottom:10px; }\n.wp-pwn-input-group label { display:block; font-size:11px; font-weight:bold; margin-bottom:4px; text-transform:uppercase; color:#666; }\n.wp-pwn-input-group input, .wp-pwn-input-group select { width:100%; padding:8px; border:1px solid #ccc; border-radius:4px; box-sizing:border-box; }\n.wp-pwn-checkbox-group { margin:15px 0; font-size:12px; display:flex; align-items:center; gap:8px; color:#666; }\n.wp-pwn-note { font-size:12px; color:#666; margin-top:12px; min-height:1em; }\n.wp-pwn-warn { color:#d63638; font-weight:bold; }\n.wp-pwn-results { margin-top:20px; border-top:2px solid #eee; padding-top:15px; }\n.wp-pwn-res-item { display:flex; justify-content:space-between; margin-bottom:6px; font-size:14px; gap:10px; }\n.wp-pwn-total { font-weight:bold; font-size:18px; color:#2271b1; margin:10px 0; padding:5px 0; border-top:1px solid #eee; border-bottom:1px solid #eee; }\n.wp-pwn-val { color:#2271b1; font-weight:bold; }\n.wp-pwn-out { width:100%; box-sizing:border-box; padding:10px; border:1px solid #ccc; border-radius:4px; font-family:monospace; font-size:13px; word-break:break-all; background:#f7f7f7; margin-top:6px; }\n.wp-pwn-btn { background:#2271b1; color:#fff; border:none; padding:9px 14px; border-radius:4px; cursor:pointer; font-size:13px; margin-top:10px; }\n<\/style><style>.wp-pwn-out{padding:12px;border-radius:6px;font-size:15px;font-weight:bold;margin-top:12px;background:#f9f9f9;border:1px solid #eee;min-height:1em;}.wp-pwn-out.ok{background:#e7f7ed;color:#2e7d32;border-color:#a5d6a7;}.wp-pwn-out.bad{background:#fdf2f2;color:#d32f2f;border-color:#ef9a9a;}<\/style><script>window.wpPwnL = {\"waiting\":\"Passwort eingeben und pr\u00fcfen\u2026\",\"checking\":\"Pr\u00fcfe\u2026\",\"found\":\"In Datenlecks gefunden\",\"change\":\"Dieses Passwort nicht verwenden\",\"safe\":\"\u2713 In keinem bekannten Datenleck gefunden\",\"err\":\"Fehler\"};<\/script>\n<div class=\"wp-pwn-container\">\n  <h3 class=\"wp-pwn-title\">Passwort-Leak-Check<\/h3>\n  <div class=\"wp-pwn-input-group\"><label>Passwort<\/label><input type=\"text\" id=\"pwn-in\" placeholder=\"Passwort eingeben\u2026\" onkeydown=\"pwnKey(event)\"><\/div>\n  <button class=\"wp-pwn-btn\" onclick=\"checkPwn()\" style=\"margin-top:8px;\">Pr\u00fcfen<\/button>\n  <div id=\"pwn-out\" class=\"wp-pwn-out\"><\/div>\n  <div class=\"wp-pwn-note\">Datenschutz durch k-Anonymit\u00e4t: Es werden nur die ersten 5 Zeichen des SHA-1-Hashes an die API gesendet \u2013 niemals das Passwort selbst.<\/div>\n<\/div>\n<script>\nasync function checkPwn(){\n  var pw=document.getElementById('pwn-in').value; var st=document.getElementById('pwn-out'); var L=window.wpPwnL||{};\n  if(!pw){ st.className='wp-pwn-out'; st.innerText=L.waiting||''; return; }\n  st.className='wp-pwn-out'; st.innerText=L.checking||'...';\n  try{\n    var buf=await crypto.subtle.digest('SHA-1', new TextEncoder().encode(pw));\n    var arr=Array.prototype.slice.call(new Uint8Array(buf));\n    var hex=arr.map(function(b){ var s=b.toString(16); return (s.length===1?'0':'')+s; }).join('').toUpperCase();\n    var prefix=hex.slice(0,5), suffix=hex.slice(5);\n    var res=await fetch('https:\/\/api.pwnedpasswords.com\/range\/'+prefix);\n    if(!res.ok) throw new Error('HTTP '+res.status);\n    var text=await res.text(); var lines=text.split('\\n'); var count=0;\n    for(var i=0;i<lines.length;i++){ var pp=lines[i].split(':'); if(pp[0].trim()===suffix){ count=parseInt(pp[1],10)||0; break; } }\n    if(count>0){ st.className='wp-pwn-out bad'; st.innerText=(L.found||'Found in breaches')+': '+count.toLocaleString('en-US')+'x \\u2013 '+(L.change||'do not use this password'); }\n    else { st.className='wp-pwn-out ok'; st.innerText=L.safe||'Not found in known breaches'; }\n  }catch(e){ st.className='wp-pwn-out bad'; st.innerText=(L.err||'Error')+': '+e.message; }\n}\nfunction pwnKey(ev){ if(ev.key==='Enter') checkPwn(); }\n<\/script>\n\n\n<div id=\"netgu-4188243027\"><script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- NetGuide.io-After-Widget-Tools -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-6258556257245998\"\r\n     data-ad-slot=\"5175852350\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Ist mein Passwort geleakt?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Der Check verr\u00e4t, ob ein Passwort bereits in bekannten Datenlecks aufgetaucht ist \u2013 auf Basis des Dienstes \u201eHave I Been Pwned&#8221;. Taucht ein Passwort dort auf, sollte es nirgends mehr verwendet werden.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>k-Anonymit\u00e4t:<\/strong> Dein Passwort verl\u00e4sst den Browser nicht. Es wird lokal per SHA-1 gehasht; nur die ersten 5 Hash-Zeichen gehen an die API, die eine Liste passender Endungen zur\u00fcckgibt.<\/li>\n\n\n<li><strong>Treffer = unsicher:<\/strong> Ein gefundenes Passwort steht in Angreifer-W\u00f6rterlisten und ist praktisch wertlos als Schutz.<\/li>\n\n\n<li><strong>Tipp:<\/strong> Nutze lange, einzigartige Passw\u00f6rter \u2013 siehe unseren Passwort- und XKCD-Passphrasen-Generator.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Verwandte Tools<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"\/tools\/de\/passwort-generator\/\">Passwort-Generator<\/a><\/li>\n\n\n<li><a href=\"\/tools\/de\/passwort-entropie-rechner\/\">Passwort-Entropie-Rechner<\/a><\/li>\n<\/ul>\n\n\n<div id=\"netgu-1746005129\" class=\"netgu-after-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"4559785002\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Pr\u00fcfen, ob ein Passwort in bekannten Daten\u00adlecks auftaucht \u2013 \u00fcber die Have-I-Been-Pwned-API mit k-Anonymit\u00e4t. Das Passwort wird nicht gesendet.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[115],"tags":[],"class_list":["post-212","post","type-post","status-publish","format-standard","hentry","category-validator"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/posts\/212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/comments?post=212"}],"version-history":[{"count":0,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/posts\/212\/revisions"}],"wp:attachment":[{"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/media?parent=212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/categories?post=212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/tags?post=212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}