How it stays private.
Your password is hashed on our server with SHA-1, and only the
first 5 characters of the hash are sent to the breach database (k-anonymity, the same technique
Have I Been Pwned uses). The full password never leaves this page in readable form, and we never store or log it.