🕵️ your email is hashed locally, only the hash is ever sent
Gravatar Privacy Checker
Gravatar links a photo and profile to your email address, and anyone who knows your email can look it up - no login required. Check what's publicly visible for any email. Your email itself is never sent anywhere; only its MD5 hash (Gravatar's own required lookup format) is.
How it works
The email you enter is normalized (trimmed, lowercased) and run through the MD5 algorithm entirely in your browser, then only that hash is used to request gravatar.com/avatar/<hash>?d=404 — a 200 response means a public photo exists for that email, a 404 means none does. The raw email address itself is never sent anywhere.
FAQ
- Why MD5 specifically, when it's considered a weak hash for security use?
- Because that's the exact hash format Gravatar's API requires for avatar lookups — it's not being used here for cryptographic security, just as the fixed identifier Gravatar expects, so its known weaknesses as a security hash don't apply to this use case.
- Can someone reverse the MD5 hash back to find my email address?
- Not directly, but MD5 of an email is essentially a lookup key — with fast hardware, someone can hash a large list of guessed or leaked email addresses and check for a match, so treat the hash as only as private as the email address it represents.
Free, unlimited, no account. If this saved you a paid tool, a small thanks is appreciated.
Say thanks — $3