Have I Been Pwned
Check if your email or password has been compromised in a data breach.
Pwned Accounts
17.5B+
Pwned Websites
990+
About Have I Been Pwned
Have I Been Pwned is a globally recognized resource for internet security, created by security researcher Troy Hunt. It allows individuals to check if their online accounts may have been compromised in a data breach by searching for their email address or phone number. In addition to its free public-facing search engine, HIBP provides a 'Pwned Passwords' service to check for exposed passwords and a notification service for future breaches. For businesses, HIBP offers a commercial API that enables them to check their customers' credentials against the database to mitigate risks like credential stuffing and protect their platforms.
Core Features
Email Search
Check if an email address has appeared in any known data breaches.
Password Search
Check if a password has been exposed in a data breach, without logging the password.
Domain Search
Allows domain owners to get a list of all breached accounts under their domain.
Breach Alerts
Subscribe to notifications for when your email address appears in a new breach.
API Services
Breached Account Api
Search for a single account by email address or username.
Pwned Passwords Api
Search for passwords that have appeared in data breaches.
Breach Information
Get details on all the breaches indexed within the service.