8PWDThe security check-up
One tap re-scans every password on this device against a million leaked passwords, looks for weak, reused and out-of-date ones, checks two-step verification and passkeys — and tells you what to fix first. Nothing leaves the device.
Security check-up
One tap re-scans every password on this device: leaks, weak, reused, out of date, missing two-step.
Fix things, run it again, collect badges. Share the result if you like — it never includes account names.
- 1
Checking against the leaked-password list…
- 2
Looking for reused and weak passwords…
- 3
Checking two-step verification and passkeys…
What costs points
The score starts at 100. Five things cost points, and the weights add up to exactly 100; each is applied in proportion to how many of your accounts it affects, so fixing a handful always moves the number.
- In a public leakup to 40 points
- Weak passwordsup to 20 points
- Reused passwordsup to 20 points
- Long unchangedup to 10 points
- No two-factor codeup to 10 points
Checked on this device · no internet
“In a public leak” means the password appears in the Have I Been Pwned list of a million most-leaked passwords, bundled inside the app — a leaked password is public even if it is twenty characters long, so it costs the most. “No two-factor code” only counts websites that actually support it (from 2FA Directory); sites that don't are not held against you. Accounts you sign in to with a passkey are not penalised at all.
Accounts with no password are left out of the calculation rather than scored as zero. Inside each smart group you can ignore an issue for one account; the points come back immediately and the entry is listed under Ignored issues.
The grade
95 and above is A, then one grade every 5 points down to F at 70, then G (60), H (50), I (35) and J. It is a password-security grade, not a credit rating — it only borrows the readability.
- AExcellent — Nearly nothing left to fix. Keep it here.
- BVery good — A couple of small things stand between you and the top grade.
- CGood — Solid overall; the items below are worth an evening.
- DFair — Some real weak spots. Start with the item that costs the most points.
- EAverage — About where most people start. Each fix moves the grade.
- FBelow average — Several accounts are exposed. Reused or weak passwords first.
- GPoor — One leaked password would likely open more than one account.
- HVery poor — Most passwords here need changing. Use the generator.
- ICritical — Nearly every account is weak, reused or stale.
- JSevere — Treat every password in this vault as already compromised.
The eight badges
First check-up
Run the check-up once.
Leak-free
No password in the public leak list.
No repeats
No password used twice.
Two-step everywhere
Two-step verification on every site that supports it.
Passkey pioneer
Store at least one passkey.
Top grade
Score 90 or higher.
Fixer
Fix 5 or more issues between two check-ups.
On a streak
Three check-ups in a row at 80 or higher, at least a week apart.
Fix things, run it again, collect badges. Share the result if you like — it never includes account names.
In the app: Me › Security check-up
The text on this page is the text 8PWD 3.1 shows on screen, in this language; it is generated from the app's own strings so the two cannot drift apart.
Download on the App Store
Free for ten passwords, every feature included. One purchase for iPhone, iPad and Mac.
