PwnedKeys – all the keys that should never be used again

Private keys are supposed to be, well… private. If a key is out there “in the wild”, anyone could have it. Anyone could be using it to compromise your security.

Want to know if a private key is in the wild? This site is for you. We collect private keys, and provide you with proof they’re compromised, so you can know when a key is untrustworthy.

To see whether a key is known to be compromised, you can use our online tools, or look it up via the Pwnedkeys API.

If you have a compromised key, please submit it.

To keep up-to-date with the latest and greatest in compromised keys, subscribe to the newsletter.

If you have questions or comments, feel free to check out the FAQ or contact us.