---
metadata:
- name: generator
content: Diplodoc Platform v5.50.6
alternate:
- https://yandex.uz/support/browser/en/security/check-passwords.md
- https://yandex.uz/support/browser/kk/security/check-passwords.md
- https://yandex.uz/support/browser/ru/security/check-passwords.md
- https://yandex.uz/support/browser/tr/security/check-passwords.md
- https://yandex.uz/support/browser/uz/security/check-passwords.md
---
> **Documentation Index:** Fetch the complete configuration index at https://yandex.uz/support/browser/en/llms.txt
# Password check
[Yandex Browser](https://browser.yandex.com/) checks your passwords for vulnerabilities and suggests replacing the insecure ones. Passwords are checked automatically every time a password is saved. All the new passwords received during [data syncing](https://yandex.uz/support/browser/en/security/passwords-sync.md) are also checked. You can manually run a password check at any time.
{% note alert %}
The password check doesn't work in [Incognito](https://yandex.uz/support/browser/en/personal-data-protection/incognito-mode.md) mode.
{% endnote %}
## Password check page {#begin-checking}
1. Click **** → **Passwords, cards, data**.
1. If you have already [created](https://yandex.uz/support/browser/en/security/passwords-management.md#master-password) a master password, enter it to access your vault.
1. Click **Password check**. The check starts.
{% note info %}
If you don't have a [master password](https://yandex.uz/support/browser/en/security/passwords-management.md#master-password) but do have a Windows or macOS password, the browser will ask you to enter it. This is safe: Yandex Browser can't access your system password since you enter it in a system window. Linux doesn't have system passwords.
{% endnote %}
If the check identifies insecure passwords, [change](#fix) them.
## Why passwords are insecure {#why}
{% list tabs %}
- Publicly available
Your passwords have been found in open databases on the internet. A hacker may choose your username and log in to your account. Change these passwords as quickly as possible to protect your data.
{% note info %}
Yandex Browser never sends your passwords anywhere. During the check, Yandex Browser compares the prefixes of password [hashes](https://en.wikipedia.org/wiki/Hash_function) from the password vault with the prefixes of insecure passwords.
{% endnote %}
- Repeating
Using the same password on multiple sites is risky. After getting the password to one site, hackers can access others. It's especially dangerous if it is a bank or payment system.
Come up with or [generate](https://yandex.uz/support/browser/en/security/passwords-manager.md#save_generator) a new [secure](https://yandex.com/support/common/en/security/web-security.html#good-password) password for each website. To protect your accounts even further, use a [master password](https://yandex.uz/support/browser/en/security/passwords-management.md#create).
- Simple
Don't use simple passwords like 123456, qwerty, password. These accounts are often hacked.
Come up with or [generate](https://yandex.uz/support/browser/en/security/passwords-manager.md#save_generator) a new [secure](https://yandex.com/support/common/en/security/web-security.html#good-password) password for each website. To protect your accounts even further, use a [master password](https://yandex.uz/support/browser/en/security/passwords-management.md#create).
{% endlist %}
## Changing passwords {#fix}
1. Hover over an insecure password and click **Change on website**. The site you saved the password for will open.
1. Log in to the site and open the password change section.
1. Change the password to a more secure one or [generate](https://yandex.uz/support/browser/en/security/passwords-manager.md#save_generator) one.
## Disabling password check {#turn-off}
To disable the automatic check:
1. Click **** → **Passwords, cards, data**.
1. If you have already [created](https://yandex.uz/support/browser/en/security/passwords-management.md#master-password) a master password, enter it to access your vault.
1. In the menu on the left, click **Autofill settings**.
1. In the **Password check** section, disable the **Check passwords automatically** option.
You can always [manually](#begin-checking) run the password check.
Contact support