How Frame handles breach data

Hashes only

Breach data in Frame is kept as hashes: one-way fingerprints that can be compared but not turned back into the original. Frame never stores or shows readable passwords or raw breach records.

The password check

The Password check hashes your password on your device and sends only the first 5 characters of that hash. Frame returns every hash that starts the same way, and your device finishes the match. Your password never leaves your device in full.

What you see

• The breach name and date.
• The kinds of data exposed, like email, password or phone number.
• For an infostealer log, how many sites were captured.
• A checklist of fixes.

Only your own emails

Frame only checks emails you’ve verified with a code, so nobody can use it to see someone else’s breaches. See How scanning works.