Homoglyph Detector

Spot lookalike Unicode letters (Cyrillic а, Greek Η) and invisible characters in text. Runs in your browser.

Runs on your deviceFreeNo sign-up
Runs in your browser
Loading tool…

Designed to run in your browser. See the privacy policy.

About Homoglyph Detector

Some characters from other alphabets look exactly like English letters. A Cyrillic "а" or a Greek "Η" is visually identical to the Latin "a" and "H", which is how lookalike domains such as "pаypal.com" and fake usernames are made. Invisible characters like the zero-width space can also hide inside text and break searches, passwords or code.

This homoglyph detector checks text character by character. It highlights suspicious characters inline, lists each one with its position, Unicode code point, script and the ASCII character it imitates, and produces an ASCII "skeleton" of the text. You can also get a copy with only the invisible characters removed. The check runs in your browser.

The lookalike list is a subset of the Unicode confusables data (Cyrillic, Greek, Armenian, Cherokee, fullwidth and mathematical letters), used under the Unicode License.

How to use

  1. Paste a domain, username, email address or any text into the box.
  2. Look at the highlighted view: marked characters are not the plain ASCII they appear to be.
  3. Check the table for each character's position, code point, script and what it looks like.
  4. Copy the ASCII skeleton, or turn on "Remove invisible characters" to copy the text with only hidden characters stripped.

FAQ

What is a homoglyph attack?+
It is a trick where a character from another script replaces a lookalike Latin letter, so "pаypal.com" with a Cyrillic "а" looks real but points somewhere else. It is used in phishing links, fake accounts and code that hides malicious changes.
How can I tell if a domain uses Cyrillic letters?+
Paste it here. Any Cyrillic character that looks like a Latin letter is highlighted and listed with the script "Cyrillic" and the letter it imitates. A browser showing the domain as "xn--…" (punycode) is another sign.
How do I find and remove zero-width spaces?+
Invisible characters such as the zero-width space (U+200B), zero-width joiner, byte order mark, soft hyphen and bidirectional control characters are shown as marked code points. Turn on "Remove invisible characters" to get a copy without them.
What is the ASCII skeleton?+
It is your text with every detected lookalike replaced by the ASCII character it imitates and invisible characters removed. If the skeleton of two strings is the same, they can look the same to a reader.
Does it catch every lookalike character?+
No. It covers the common sources (Cyrillic, Greek, Armenian, Cherokee, fullwidth and mathematical alphanumeric letters) from Unicode's confusables list, mapped to plain ASCII. Lookalikes from other scripts, or pairs that only look alike in certain fonts, may not be flagged.