Has my password been leaked?

Check a password against more than 900 million passwords from real data breaches. Your password never leaves this device.

How can this be safe?

Your browser turns the password into a code (a SHA-1 hash). The password itself is never sent.
Only the first 5 characters of that code go to Have I Been Pwned. Hundreds of different passwords share those 5 characters, so nobody can know which one you typed.
The answer is a list of codes that start the same way, padded with fake entries. Your browser compares them here, on your device.
Nothing is stored and nothing goes to geopolcoins.xyz. You can even turn off Wi-Fi after the page loaded, except for the check itself.

Change that password everywhere you use it, starting with e-mail and banking.
Use a different password for every site. A password manager remembers them for you.
Turn on two-step login (2FA) on important accounts.
Never type your seed phrase or wallet recovery words anywhere. Not here, not on any site.