Breach checks: are your passwords in a known leak?
Turn on live breach checks and Vault checks your passwords against known breaches while your vault is open. Heimlane never sees your passwords or the result.
Websites get their passwords stolen, and Alice wants to know if hers are among them. In Settings, she turns on Live breach checks: it is off by default and set per browser.
Her browser computes a fingerprint of each password and sends only its first 5 characters to a public database of known breaches. The answer is a list of fingerprints starting the same way, compared in her browser. The check does not go through Heimlane: Heimlane never sees the password, the fingerprint or the result.
Checks run while the web vault is open; there is no background scan. Alice can also check a single password from its item. Her Security Score, computed in her browser, counts exposed, weak and reused passwords.
Transcript
A password leaked on one site puts your account at risk. Heimlane Vault lets you check for breaches easily, right from the settings. Everything is checked in your browser, and your passwords are never transmitted. Here, Alice has 4 compromised passwords. She has a free Heimlane Vault account, and is looking for which ones are affected. With a Premium account, Vault would show her directly. Here, it's the password for her LinkedIn account. Changing it will instantly restore a good level of security on that account.
