Built for developers. Operated by security teams.

Simple REST APIs, clear documentation, and a console designed for both developers and security operators.

curlNode.jsPythonGo

One API call. That's it.

Hash the password on your side, send the first 5 characters of the SHA-1 hash, and compare locally.

$ echo $PASSWORD_HASH
5BAA6
$ curl -s https://api.leakjar.com/v1/passwords/range/$PASSWORD_HASH \
-H "Authorization: Bearer lj_..."
200 OK — text/plain, 847 lines of SUFFIX:COUNT
# Compare full hash locally to check for a match

Manage everything from the console

API keys, project settings, usage analytics, and audit logs — all in one place.

console.leakjar.com/projects

Vibe-code it in two steps

Grab a free key (10,000 checks/month, no card), paste our prompt into Cursor, Claude Code, or Codex, and let your agent wire up breached-password screening. Agents read /llms.txt for the exact contract.

Start building today

Sign up for a free account and integrate breached password screening in minutes.