Was my email in a data breach?
Type an address. We ask Have I Been Pwned once, show you the breaches it appears in with what leaked and what to do, and forget the address the moment the page is sent.
What you get
- Every public breach the address appears in, newest first.
- What data leaked in each: passwords, phone numbers, addresses.
- What to do now, in plain steps.
- A link to each breach page and to Have I Been Pwned.
Common questions
Do you keep the address?
No. It is sent to Have I Been Pwned over an encrypted connection and not written to our database or our logs. We count how many checks run per day, nothing else.
It says not found. Am I safe?
It means the address is not in any published breach. Breaches that were never made public are not in any catalogue, so keep unique passwords and two-factor sign-in anyway.
Can I watch all my staff addresses?
Yes, with Breach Watch: once your domain is verified, every staff address is checked after each new breach and you get an alert with what to do.
Get told when it changes
Add the site to a free account and we check it every five minutes, with certificate, domain and email security alerts in plain English.