haveibeenpwned.com
Have I Been Pwned (HIBP) lets people check whether an email address or username appears in known data breaches and publicly exposed paste records. Results identify the breach sources and exposed data categories included in HIBP's collection; a missing result does not prove an account was never compromised. The separate Pwned Passwords service checks a password against previously exposed passwords using k-anonymity: the password is hashed locally and only a short hash prefix is sent. Sensitive-breach results and searches across a domain require verification, while some API capabilities are subscription-based.
API-provided profile · Submitted by a trusted data editor
Have I Been Pwned (HIBP) lets people check whether an email address or username appears in known data breaches and publicly exposed paste records. Results identify breach sources and exposed data categories included in HIBP's collection, but a missing result does not prove an account was never compromised. The separate Pwned Passwords service checks passwords against previously exposed passwords using k-anonymity: the password is hashed locally and only a short hash prefix is sent. Sensitive-breach results and searches across a domain require verification.
Share useful, factual experiences about this website.