Enable JavaScript to run a check. Before sending the address, read the notice and authorize processing.
How the address is used
The full address is sent over HTTPS to Make, which queries Have I Been Pwned (HIBP). The query is not anonymous. Results appear on this page; the query alone does not authorize commercial contact.
Make may retain technical execution and webhook records according to its service plan and configuration. These records are separate from the optional commercial contact registration described after the result.
Privacy PolicyData source and limitations
Incident information is supplied by Have I Been Pwned (HIBP) through the Make integration. Coverage depends on incidents included in that source; it does not contain every existing breach.
This tool does not guarantee an update schedule. A recent or undisclosed incident may not yet appear in the source.
Explore Have I Been PwnedFrequently asked questions
What do you do with the email address I provide?
We send the address to Make to query HIBP and display the result. The query uses the full address. Suppliers’ technical records follow their policies. Commercial contact registration is separate and requires optional authorization after the result.
Where does the breach data come from?
From Have I Been Pwned (HIBP). We show information returned by that source, such as the incident name, date and exposed categories, where available. We do not calculate a severity rating from those details.
No records were found. Does that mean my account is protected?
No. It only means this query returned no record. The source does not cover every incident. Continue using unique passwords and two-step authentication, and watch out for suspicious messages.
A breach was found. What should I do?
Review the services listed, change the affected passwords and any passwords reused on other accounts. Enable two-step authentication and check for unfamiliar access. Reported exposure does not prove current access to your account.
Can I check someone else’s email?
Check only your own addresses or addresses for which you are responsible, with authorization when needed. Do not use this tool to check lists of third parties or to identify targets.
