← Demos

Password Similarity Search

Exact match vs. encrypted similarity on breach database

Try these (hash misses, similarity catches):

Exact Match Hash / OPRF

Enter a password to check

Similarity Match Encrypted Vector

    Enter a password to check

    How it works

    Traditional breach checking uses hash(password) for exact matching — but an attacker can easily guess near-identical variations that slip through.

    This demo combines password embedding for similarity search with CKKS-based Private Information Retrieval (PIR), so the server never sees the password or its embedding — even during the breach lookup.