SNOS

Say No to Online Scams

SNOS

Security tools

SNOS privacy-first password and email checks, plus Malaysia’s official anti-scam services — organised the way a cybersecurity training desk would set them up.

These checks run with privacy first: strength stays on your device; breach lookup uses Have I Been Pwned k-anonymity. SNOS does not store your password or email.

We do not steal or store your password

  • Password strength runs only on your device. SNOS never receives your password.
  • Breach check uses Have I Been Pwned’s k-anonymity API: only a short hash prefix leaves your phone — never the password, and never to SNOS servers.
  • We do not ask for your name, IC, or account login. Anonymous analytics may record that you used this tool (score band only), never the password text.
  • Clear the field when you finish. Prefer testing a similar password, not your real banking password, if you are still unsure.

For Jangan Beri Kena Scam Cyberdrill

SNOS is an independent community tool from MSK42DAO for Jangan Beri Kena Scam training. It opens public pages run by MCMC, NSRC, PDRM, BNM, SC, and others. Those agencies have not connected their systems to SNOS, and SNOS is not an official government app.

Password strength & breach check

Inspired by Have I Been Pwned Passwords, Bitwarden Password Strength, and Security.org — implemented privately inside SNOS.

Tick the privacy assurance above to unlock the password checker.

Technical note: your device hashes the password with SHA-1, then asks HIBP only for hashes starting with the same 5 characters. Matching happens on your device.

Check if your email was in a breach

To keep your email address off SNOS servers, we open the official Have I Been Pwned website. Enter your email there — not here.

SNOS never collects your email for this check. Have I Been Pwned is an independent service (Troy Hunt). Read their privacy policy on their site.

Open Have I Been Pwned (email check)

SNOS is a community POC that guides you to official Malaysia government resources. Always verify with the official sites.
Not an official government application.