Passwords are never submitted in a URL

Questions about this rule

Does TRUST_NO_PASSWORD_OVER_GET affect my score?

Yes. It is an importance 9 rule at RESEARCH confidence, so a failure costs 9 × 0.7 points of impact in the Trust & Scam category before that category is normalised to 100.

What does RESEARCH confidence mean?

Backed by large-sample study or industry research, not a specification. Confidence is a declared tier rather than a per-rule number, so every rule backed by the same class of evidence carries the same weight - which is what makes the score reproducible instead of hand-tuned.

How do I check TRUST_NO_PASSWORD_OVER_GET on my own site?

Paste your URL into the box above and it runs only this rule, usually in a couple of seconds. It is also included in the Trust & Scam checker and in a full scan.