All tools
/change-password-checker
Change-Password URL Checker
Check whether a site publishes a well-known change-password URL.
Try:
About Change-Password URL Checker
Change-Password URL Checker looks for a URL at the standard /.well-known/change-password location, a convention that lets a password manager send a user directly to the right page when it flags a password as compromised or reused.
Use this to confirm the convention is actually wired up correctly after adding it to a site, since password managers rely on this exact path and silently fall back to guessing if it is not present.
Most sites do not implement this yet, so not finding one is common rather than alarming. It is a relatively new convention, and this check is most useful for confirming your own implementation works as intended.
Tutorials
HSTS Explained: What It Protects and What It Does NotWhy telling a browser to always use HTTPS closes a gap a valid certificate alone leaves open, and what to check before turning it on.5 min readChoosing and Judging a Strong PasswordWhy length matters more than complexity rules, what entropy actually means, and why a password manager changes the whole calculation.6 min readWell-Known Security Files ExplainedWhat the /.well-known/ path is for, and how security.txt and the change-password URL convention both use it to make a site's own security posture machine-discoverable.5 min read