We hash the password locally with SHA‑1, then query our billions of leaked passwords wearhouse using data wearhouse magic. We don't store or log your password