Have I Been Pwned Favicon

Have I Been Pwned

Popular service for checking if email addresses or passwords have been exposed in data breaches, providing essential security intelligence.

OSINT Breach Data Credential Checking Identity Theft Protection

Overview

Have I Been Pwned (HIBP) is a widely-used security service created by Troy Hunt that allows users to check if their email addresses, usernames, or passwords have been compromised in data breaches. The service aggregates data from thousands of public breaches and provides free access to breach notification and password exposure checking. HIBP offers a public website, a REST API for automated integration, and a domain search feature for organizations to monitor their corporate email domains. Key features include email breach checking, password exposure validation, domain monitoring, and breach notifications. HIBP is essential for security professionals, incident responders, and individuals to assess password security and identity exposure.

Primary Use Cases

Checking if email addresses have been exposed in public data breaches.
Validating if passwords have been exposed in previous breaches to enforce security.
Monitoring corporate email domains for security breaches and data exposures.

Frequently Asked Questions

Have I Been Pwned is a free security service created by Troy Hunt that allows users to check if their email addresses, usernames, or passwords have been exposed in data breaches.

Yes, Have I Been Pwned is completely free for personal use. The API also offers a free tier for developers.

HIBP aggregates data from thousands of public data breaches including those from companies, services, and online platforms that have been compromised.

Yes, HIBP provides a REST API for automated breach checking, password validation, and domain monitoring integration.

HIBP is used to check credentials during incidents, enforce password policies, monitor data breaches, and protect against identity theft.

Metadata

Official Website Visit Website
Category Info

Open Source Intelligence (OSINT) tools for gathering and analyzing publicly available information from various sources including websites, social media, DNS records, public databases, and other open data sources for security investigations and threat intelligence.

Added On

August 18, 2026

Last Updated

August 18, 2026

OSINT

Industry-leading threat intelligence platform that analyzes files, URLs, and IP addresses using 70+ antivirus engines and threat detection s...

OSINT

Free, community-driven platform for sharing Indicators of Compromise (IOCs) related to malware infrastructure, enabling threat intelligence ...

OSINT

Fast, passive subdomain discovery tool written in Go that uses certificate transparency logs, search engines, and DNS data sources.