Questions, answered
Frequently Asked Questions
Common questions about PhishIndex, how the tools work, and what happens to your data. Contact-specific questions (response times, what we accept) are answered on the Contact page.
About the project
What is PhishIndex?
PhishIndex is an independent, hobby security project that builds free browser-based tools to help people recognize phishing, avoid scams, and build safer online habits.
Is it free?
Yes. Every tool on this site is free to use, with no accounts, subscriptions, or paid tiers.
Is there a browser extension?
Not yet — a browser extension is planned and coming soon.
Is there a threat intelligence scanner?
Not yet — it is planned and coming soon.
When will the browser extension / threat intelligence scanner become available?
They are actively being worked on. We hope to release one of them by the end of 2027, however it might take longer than that.
Why do you talk about the browser extension if it's not yet available?
It's important to communicate certain details so everyone knows what to expect.
Privacy & data
Do the data processing tools send my data anywhere?
No. The data-processing tools (Base64, hashing, defanging, generators, and so on) run entirely inside your browser — nothing you type is uploaded or logged.
Why does the password checker need the internet at all?
Only the optional "check for known breaches" button makes a network request. It uses HaveIBeenPwned's k-anonymity range API, which is designed so your full password (or even its full hash) is never transmitted — only the first 5 characters of its SHA-1 hash are sent.
What data do you collect from me?
See our Privacy Policy for the full details.
Using the tools
Do I need to create an account?
No. None of the tools require sign-up or a login.
Why do I see a full-page warning if I disable JavaScript?
Every tool on this site runs as JavaScript in your browser — with it disabled there is nothing left to run, so we show that clearly instead of a silently broken page.
Reporting & contact
Where do I ask a general question?
Use the General Support form, or see our Contact page for response-time details.
Where do I report a phishing URL?
Use the Report a Malicious URL form.
Where do I submit feedback or report a bug?
Use the Feedback form.