Privacy Score

What it does

This tool runs four privacy checks in one place and combines them into a single 0–100 score with a letter grade and concrete recommendations:

1. Browser fingerprint — how identifiable your browser is from its hardware, graphics, network, and input signals.
2. Password strength — how hard a test password is to crack (0–4 tiers).
3. Breach exposure — whether that exact password has appeared in known data breaches.
4. Site security headers — paste any site’s response headers (from DevTools → Network) and get the 8-header grade.

Each check scores out of 25 points. Skipped checks never lower your score — the percent renormalizes over what you actually ran.

How to use it

1. Fingerprint runs automatically when the page opens — it reads only local browser APIs.
2. Type a password you actually use and press Check password. Strength and breach exposure are checked together; only the first 5 characters of its SHA-1

   hashhashA one-way function that maps data of any size to a fixed-length digest. Same input, same digest; any change, different digest; not reversible.

   leave your browser (k-anonymity — the same design as the standalone breach checker).
3. Open the site you want to grade, copy its response headers from DevTools, paste them into the headers field, and press Grade headers.
4. Read the score. Each weak category links to the full standalone tool for a deeper look and the fix.

Examples

A strong, safe setup — few fingerprint signals, a 4/4 password not in any breach, and A-graded headers lands 90+ (an A).

The urgent case — a password that appears in known breaches scores the password AND breach categories into the red band immediately, with a “stop using it now” recommendation, regardless of how strong it looks.

Partial runs — grade just the headers (25-point scale, percent over 25) or just the fingerprint; the score adapts to what you checked.

Good to know

• Nothing is stored. No password, no

  hashhashA one-way function that maps data of any size to a fixed-length digest. Same input, same digest; any change, different digest; not reversible.

  , no header text, no score leaves this page except the 5-character hash prefix the breach check sends to the public HIBP range API.
• The score is directional, not scientific. Fingerprint “uniqueness” is scored from which signals your browser exposes and their risk classes — real-world identifiability depends on the tracker’s fingerprinting algorithm.
• Why skipped checks don’t count against you: the score measures what was measured. Running only the headers check gives you a headers-only grade out of 25, not a 25/100.
• The four underlying tools — Browser Fingerprint, Password Strength Analyser, Breach Checker, Security Headers — each expose far more detail than this composite shows.
• Go twin: the scoring engine ships as cosmodev privacy-score in the CLI, sharing test vectors with this page’s implementation.