Free Data-Breach & Exposure Check

Free Free to use — no account needed.

Check whether your email address appears in known data breaches — the security incidents where a company's user data was stolen and leaked. You'll see which breaches, when they happened, and what kind of data was exposed, along with what to do next. Your email is never stored — it is held in memory for your request only. To perform the lookup it is sent to Have I Been Pwned, the breach-data service this check queries.

Heads up: the live breach-lookup data source isn't configured on this server yet, so a real-time check can't run at the moment. The tool is fully built and will work as soon as the data source is enabled. In the meantime, the guidance below still applies.

What this breach check shows

  • Which breaches your address appears in, by name and the site involved.
  • When each breach happened.
  • What was exposed — for example passwords, phone numbers, or addresses.
  • What to do — concrete steps to protect the accounts at risk.

Check an email

Enter an email address to check. It's best to check your own addresses.


Frequently asked questions

Is my email stored when I check it?
No. The address is never written to disk or a database here, and is held in memory only for the duration of your request. It is sent to Have I Been Pwned to perform the lookup itself.
What does it mean if my email is in a breach?
It means an account tied to that address was part of a data leak from some service. It doesn't mean you did anything wrong — but you should change any reused password and enable two-factor authentication on important accounts.
My email wasn't found — am I safe?
It's reassuring, but not a guarantee: not every breach is public or catalogued. Keep using unique passwords and two-factor authentication regardless.
What should I do first if I've been breached?
Change the password on your email account first (it's the key to resetting everything else), then on banking and any account that shared the breached password. Switch to a password manager so every account has a unique password.
Where does the breach data come from?
From a reputable breach-data service. This tool queries it live and shows you the results — it never adds your address to any list.