Frequently asked questions
The short version: you can check if your password was leaked without ever sending it.
How do I check if my password was leaked?
Install AEGIS Lite, click the shield in your Chrome toolbar, paste or type the password and press Check. In about a second it tells you how many times that password appears in known data breaches (from Have I Been Pwned), or that it wasn’t found. It’s free.
Is it safe to type my real password into AEGIS Lite?
Yes, that’s what it is built for. Your password is turned into a SHA-1 hash on your own computer. Only the first 5 characters of that hash are sent to Have I Been Pwned, which sends back every leaked hash starting with those 5 characters (hundreds of them). AEGIS Lite compares them on your computer. Your password, and even its full hash, never leave your device. Nothing is saved, and the field clears itself after each check.
What is k-anonymity?
It’s the trick that keeps your password private. Because only a 5-character hash prefix is sent, and that prefix matches hundreds of different passwords, nobody watching (including Have I Been Pwned) can tell which password you checked.
Does AEGIS Lite store my passwords?
No. It never stores, logs or sends your passwords. The Pro bulk check reads your export file on your computer, checks it, and keeps only site names, a status (breached, reused, weak or OK) and the date.
My password was found in a breach. What should I do?
Stop using it. Change it on every site where you used it, starting with email and banking. Use a different password for each site (the built-in generator helps), and turn on two-factor authentication where you can.
Can it check if my email address was in a breach?
AEGIS Lite has a “Check your email” button that opens haveibeenpwned.com, where you can check your email for free. We don’t build email scanning in, because it would mean sending your email address to a paid API.
What does Pro add?
Live Guard (a warning when you type a breached or weak password into a sign-up or change-password form), a bulk check of all your saved passwords from a Chrome or Proton Pass export, a security score out of 100, and extra themes. It’s a one-time purchase of A$[PRICE] (GST included). No subscription.
Does it work on my phone?
No. AEGIS Lite is a Chrome extension for desktop computers (Windows, macOS, Linux and ChromeOS). On your phone you can send yourself the link and install it later on your computer.
Does AEGIS Lite use cookies or tracking?
No. The extension has no cookies, no analytics and no tracking. This website uses no cookies; it may use Cloudflare Web Analytics, which counts page views without cookies and without tracking you across sites.
Can I get a refund?
Yes. You can get a refund for any reason within 14 days of buying Pro, and your rights under the Australian Consumer Law always apply. See the Refund Policy.