Password health
Scan all your vaults on-device for breached, weak, reused, and stale passwords, see a health score, and fix issues without leaving the page.
Password Health analyzes every password across your vaults — on your device — and flags the ones that put you at risk. You get a single health score plus an actionable list of items to fix.
What it checks#
| Category | Meaning | Severity |
|---|---|---|
| Breached | The password appears in a known data breach (Premium and above) | Critical |
| Weak | Short or predictable (low strength score) | Critical–Medium |
| Reused | The same password is used on more than one item | High |
| Stale | Not changed for longer than your retention window | Medium–High |
The stale threshold follows your password history retention setting (90 days by default) — see Password history.
Run a scan#
- Open Password Health in the My security sidebar (My security on some plans).
- If prompted, Unlock Vault first — analysis needs to decrypt your passwords locally.
- Choose Run Scan Now. A progress bar tracks items as they're analyzed.
- Review the results and score. Use Re-scan any time after making changes.
Passwords are decrypted and scored in your browser, never sent to PulsVault. Breach checks use k-anonymity: only the first 5 characters of a password's SHA-1 hash go to the Have I Been Pwned range API — never the password or its full hash. Only sanitized results (issue type, severity, score) are stored so your dashboard stays current between visits.
Read your results#
- Health score (0–100) — a ring gauge; 80+ is green, 60–79 amber, below 60 red. Breached and reused passwords cost the most points.
- Stat cards — Items Analyzed, Breached, Weak, Reused, Stale. The Breached card and tab appear only on plans with breach monitoring (Premium and above); on a Free plan you see four cards and no Breached tab.
- Tabs — filter the issue list by All Issues / Breached / Weak / Reused / Stale, and narrow to a single vault with the Vault: selector at the top of the page.
- Reused passwords show which other items share them; weak ones show a strength meter.
- Long lists are paged, with a page-size selector.
Notices and empty states#
- "N credentials could not be read in this analysis, so it was not saved" — some items could not be opened during the scan (for example a vault that did not unlock). PulsVault keeps your last complete result instead of overwriting it with a partial one. Re-scan once every vault opens to save a complete result.
- Detailed Analysis Required — you are looking at the summary saved by an earlier scan, which holds counts but not the item list. Choose Run Local Scan to rebuild the list on your device.
- All Clear! — the scan found no issues in your vaults (or in the vault you picked). With a vault selected and nothing to fix, you see Vault is Secure!
- Vault is Locked — unlock first; see step 2 above.
- Analysis Failed — choose Try Again.
Fix an issue#
- Choose Update on the issue row.
- In the modal, edit the password — or use Generate to create a strong replacement.
- Save Item. The analysis re-runs so your score updates immediately.
Updating the item in PulsVault doesn't change it on the actual website or service — do that first, then save the new password here. The password generator helps you pick a strong one.
Related#
- Breach monitoring — watch your email addresses for exposure in known breaches.
- The My security overview folds password health into your overall security score.