Generate and check passwords in the browser without sending the password

Password sites that “check if you were pwned” sometimes want the whole password. That is unnecessary. Have I Been Pwned’s k-anonymity API is designed so the client sends only a short hash prefix.

CipherGuard generates passwords and passphrases locally. Breach check, when you use it, sends only that prefix. The full password stays on the device.

Generate first

1. Open https://tools.sw-commercial.com/cipher.
2. Generate a passphrase or a random password with a length you can actually store in a manager.
3. Copy it once into the manager. Do not paste it into email “just to save it.”

You do not create an account. We do not see the password.

Breach check, narrowly

If you ask for a breach check, CipherGuard hashes locally and sends a short prefix to Have I Been Pwned. That is a network exception we name in the catalog. It is not a password-manager login with us. It is not a copy of your vault.

If you are offline, generate still works. The check needs the network by design.

Related

SealBox encrypts notes and files. CipherGuard is for secrets you will type into other sites. Do not store the only copy of a passphrase only in a browser tab.

What we do not do

We do not store passwords. We do not run a sync vault. Ads, if shown, are labeled. File converters are on Tool Hub. PlayNest does not use this tool.

For AdSense reviewers and for you: real URL, local generate, k-anonymity only for the optional check.

A worked example

Generate a 5-word passphrase. Copy it into a manager. Optionally run a breach check on an old password you are retiring, not on the new one you just created if you have not used it anywhere. The prefix request goes to Have I Been Pwned; the full password does not.

If the network is off, generate still works. The check will not.

Managers versus this page

CipherGuard is not a vault. It will not autofill. It will not sync. Use Bitwarden, 1Password, or the manager you already picked for storage. Use us for generate and for the optional k-anonymity check.

When to skip this tool

Skip it if you need SSO or enterprise provisioning. Skip it if you want us to store a backup of the password. We will not.

SealBox the day before in this series wraps files. CipherGuard wraps nothing; it makes the secret.

FAQ

Do you upload the file or the paste?

No. CipherGuard runs in your browser. We do not run an upload API for this job. If a model file downloads on first use, that is a program, not your document.

Do I need an account?

No. Open the page and use it. Free use does not start with an email wall. Optional Pro on other products is a one-time key; it is not required to try CipherGuard.

What happens if I clear the site data?

Drafts in the browser disappear. Exports you already downloaded stay on your disk. That is why we say export when the result matters.

Can I use this on a phone?

Yes, if the browser can pick a file or paste text. Heavy models are slower on a phone. That is your device doing the work, not a queue on our GPU.

Do ads see the content?

Labeled ads, if shown, do not receive the file or the paste. The SW Toolbox extension has 0 ads. This page is a webpage tool on tools.sw-commercial.com.

How does this sit in the August 2026 series?

From 22 August backward, the catalog blog names one live product per day. CipherGuard is the product for this date. Sibling days cover other tools on the same host, then PlayNest on learning.sw-commercial.com (24 August) and SW Toolbox (25 August).

Whole password to HIBP?

No. Optional check sends a short hash prefix only.

Password manager?

We are not a vault. Generate here, store in your manager.

For AdSense reviewers: the URL above is live. The steps are the product. There is no placeholder converter behind the link.

Limits, restated

This guide is for one product URL. It is not a cloud backup. It is not a team workspace. If you need those, another vendor already sells them. We would rather you leave than pretend we store the file. Close the tab when you finish on a shared computer. Download the result if you need it tomorrow. The privacy policy at sw-commercial.com/privacy is the full legal text. The catalog at sw-commercial.com lists webpage tools, PlayNest on learning.sw-commercial.com, and Chrome extensions. This day’s article is only the product named in the byline.