Data Breach Checker
Check if your email address has been compromised in a data breach. Powered by Have I Been Pwned.
How To Protect Yourself
Unique Passwords
Use a different password for every account. A password manager makes this easy.
Enable 2FA
Two-factor authentication adds a second layer of protection even if your password is compromised.
Monitor Breaches
Sign up for breach notifications at haveibeenpwned.com to get alerted when your email appears in a breach.
Frequently Asked Questions
What is a data breach?
A data breach occurs when unauthorized individuals gain access to sensitive data, typically from a website or service. This can include email addresses, passwords, personal information, and financial data.
What should I do if my email was breached?
Immediately change your password for any accounts using that email, especially if you reused passwords. Enable two-factor authentication (2FA) on all important accounts. Consider using a password manager to generate unique passwords for each account.
How does this tool work?
We check your email against the Have I Been Pwned database, which collects data from publicly disclosed breaches. This database contains billions of records from thousands of data breaches.
Is it safe to enter my email here?
Yes. We only send your email to the Have I Been Pwned API to check for breaches. We don't store your email or any results. The check is performed securely over HTTPS.
Why am I in breaches I don't recognize?
Sometimes your data appears in breaches from services you used years ago, or from companies that had your data through third parties. Some breaches are from credential stuffing lists compiled from multiple sources.
More Free Tools
View all 9 toolsCheck SSL certificate validity and TLS security
Check SPF, DMARC, and MX records
Test password strength (100% client-side)
Check DNSSEC and CAA records
Your privacy matters. We don't store any data you submit. Learn more
Building a Web App?
VAS scans your application for security vulnerabilities - exposed API keys, database misconfigurations, missing security headers, and more.
Run Full Security Scan