All Tools › Security & Privacy › Breach Leak Checker

Breach Leak Checker

Search the Have I Been Pwned breach directory by company, domain or data type.

Your email address is never sent anywhere by this page. The breach directory fetch happens server-to-server from this page to Have I Been Pwned, and your email is only used locally to highlight breaches affecting your domain.

Search breaches

Search term (company, domain or name)

Year

Data class

0Total breaches

0Total accounts affected

Check breaches for your email domain

View account on HIBP

The tool extracts your domain and highlights breaches affecting that domain below. You can also open the official per-account check on haveibeenpwned.com, the link appears after you enter a valid email.

Check whether your details appear in breaches

Data breaches expose billions of email addresses and passwords, and reused credentials are a leading cause of account takeovers. Checking whether your email or a password has shown up in known breaches tells you where to act — change a password, enable two-factor authentication, stop reusing a compromised one.

How to use it

Enter the email address or password to check.
Review whether it appears in known breach data.
If it does, change that password everywhere you used it.

What to do about a hit

Change the affected password immediately, and anywhere you reused it.
Turn on two-factor authentication where available.
Move to unique passwords stored in a password manager.

Questions people ask

Is it safe to check a password here? Reputable breach checks compare a partial fingerprint rather than sending the full password; still, prefer checking passwords you intend to retire.

A hit means I'm hacked? Not necessarily — it means that credential was exposed somewhere, which is reason enough to change it and stop reusing it.