—/100 · —
Spusť libovolnou kontrolu níže — vynechané kontroly nikdy nesníží tvé skóre.
Čtou se signály tvého prohlížeče…
(Dokumentace v angličtině)
What it does
This tool runs four privacy checks in one place and combines them into a single 0–100 score with a letter grade and concrete recommendations:
- Browser fingerprint — how identifiable your browser is from its hardware, graphics, network, and input signals.
- Password strength — how hard a test password is to crack (0–4 tiers).
- Breach exposure — whether that exact password has appeared in known data breaches.
- Site security headers — paste any site’s response headers (from DevTools → Network) and get the 8-header grade.
Each check scores out of 25 points. Skipped checks never lower your score — the percent renormalizes over what you actually ran.
How to use it
- Fingerprint runs automatically when the page opens — it reads only local browser APIs.
- Type a password you actually use and press Check password. Strength and breach exposure are checked together; only the first 5 characters of its SHA-1
hashhashA one-way function that maps data of any size to a fixed-length digest. Same input, same digest; any change, different digest; not reversible.
leave your browser (k-anonymity — the same design as the standalone breach checker). - Open the site you want to grade, copy its response headers from DevTools, paste them into the headers field, and press Grade headers.
- Read the score. Each weak category links to the full standalone tool for a deeper look and the fix.
Examples
A strong, safe setup — few fingerprint signals, a 4/4 password not in any breach, and A-graded headers lands 90+ (an A).
The urgent case — a password that appears in known breaches scores the password AND breach categories into the red band immediately, with a “stop using it now” recommendation, regardless of how strong it looks.
Partial runs — grade just the headers (25-point scale, percent over 25) or just the fingerprint; the score adapts to what you checked.
Good to know
- Nothing is stored. No password, no
hashhashA one-way function that maps data of any size to a fixed-length digest. Same input, same digest; any change, different digest; not reversible.
, no header text, no score leaves this page except the 5-character hash prefix the breach check sends to the public HIBP range API. - The score is directional, not scientific. Fingerprint “uniqueness” is scored from which signals your browser exposes and their risk classes — real-world identifiability depends on the tracker’s fingerprinting algorithm.
- Why skipped checks don’t count against you: the score measures what was measured. Running only the headers check gives you a headers-only grade out of 25, not a 25/100.
- The four underlying tools — Browser Fingerprint, Password Strength Analyser, Breach Checker, Security Headers — each expose far more detail than this composite shows.
- Go twin: the scoring engine ships as
cosmodev privacy-scorein the CLI, sharing test vectors with this page’s implementation.