This password has been found in a hacked database.

Your password never leaves this page. The check sends only the first 5 characters of its scrambled fingerprint (hash) to Have I Been Pwned, which is not enough to reveal the password itself. How it works