Personal Information in Password Checker
Check whether a password contains your name, username, email parts, birthday in common formats or phone digits, even in leetspeak or reversed.
Separate with commas.
Type a password above to analyze it. Nothing is sent anywhere.
Checks names, username, email parts, birth-date formats (YYYY, DDMM, MMDD, DDMMYYYY…), the last digits of your phone number and any other words, also in leetspeak or reversed. Everything stays in your browser.
Runs entirely in your browser. Your data is never uploaded.
What is Personal Info Pattern Detector?
Many passwords contain the owner's name, birth date or pet's name, which an attacker can find on social media. Enter the details you want to check and this tool finds them in the password, including leetspeak and reversed spellings.
How to use Personal Info Pattern Detector
- Fill in any of the fields: First name, Last name, Username, Email, Date of birth, Phone number, Other words.
- Type the password into the Password field.
- Read how many pieces of personal information were found.
- Check the table to see which information appears and how (directly, leetspeak or reversed).
Example
Password M4ria1990!, first name Maria, date of birth 1990-05-12
2 piece(s) of personal information found: maria (With leetspeak), 1990 (Directly)
When to use Personal Info Pattern Detector
Use it to check passwords for yourself, family members or in security awareness training. It only finds the information you type in; it does not know anything else about you.
How Personal Info Pattern Detector works
Tokens are built from the fields: name parts of 3+ characters, username and email local-part pieces, the email domain name, birth-date formats (YYYYMMDD, DDMMYYYY, MMDDYYYY, DDMMYY, MMDDYY, YYMMDD, DDMM, MMDD, YYYY and a two-digit year when it stands alone), the full phone number and its last 4 and 7 digits, and any comma-separated extra words. The password is compared lowercased, with leetspeak undone and reversed. Shorter tokens contained in a longer match are not listed twice.
Common Use Cases
- Checking whether a password contains a birth year
- Security awareness demos with fictitious personal data
- Verifying that a child's password does not include their name
- Reviewing passwords before a password-policy rollout
Security Note
Use fictitious data in shared or recorded training sessions.
FAQs
Is my personal data sent anywhere?
No. All fields and the password are processed in your browser and are not stored.
Why does it check reversed spellings?
Writing a name backwards (airam) is a common trick, and cracking tools try reversed words automatically.
Which date formats are recognised?
Year-first, day-first and month-first orders with 4- or 2-digit years, plus day-month and month-day pairs and the year on its own.