RekeyBreach tracker · offline copy · v1.0 (8 August 2026)The guide
Free tool

Turn a breach into a worklist you can actually finish.

Add your accounts, get the direct change-password page for each one, and work through them a few at a time. Nothing you type here leaves your computer. There is no server, no signup, and no account.

This copy runs from your computer. No internet needed, nothing is sent anywhere, and it keeps working if this site ever goes away. Your list is saved in this browser. Use Save to a file for a copy you can move between computers or keep as a backup.
Add your accounts

Three ways. Pick whichever is least effort.

One per line, or separated by commas. Domains, not full URLs, though we will strip those for you.

Read this before you export anything. A password manager export contains your passwords in plain text. This tool reads only the site and username columns and ignores every password, note and one-time-code column completely. Nothing is uploaded, because there is nowhere to upload it to. Delete the export file from your computer as soon as you are done.

Works with exports from Bitwarden, 1Password, LastPass, Chrome, Dashlane, Keeper, NordPass and Proton Pass. Choose the file or paste its contents.

What happens next
  1. Each account gets a tier. Email and your phone carrier are tier 1, money is tier 2, everything else is tier 3.
  2. Each account gets its direct change-password page where we have one, from a directory of 174 sites.
  3. You work one at a time, and a row only counts once you have logged out and back in.
0On the list
0Done and verified
0Still to do
0%Complete
TierAccountChange-password pageStatus
Read the guide
Where the links come from

The change-password directory is Apple's public password-manager-resources project, the same dataset Safari and several password managers use. 174 of its entries are bundled here, retrieved 8 August 2026. None of these URLs is guessed, and where a site is missing the tool says so rather than inventing one.

Copyright 2020-2026 Apple Inc. Used under the project's MIT-style licence, which permits use and redistribution provided the copyright and permission notice are included. The full notice ships in the spreadsheet version.

What this does not do

It does not change any password for you, and it never sees one. It opens the right page and keeps score. That last step is the part we are building into Rekey, a browser extension that fills the change form and keeps your old password until the new one is confirmed working. Join the early-access list if you want to know when it lands.