🌐
Have I Been Pwned
haveibeenpwned.com
Have I Been Pwned: Check if your email address has been exposed in a data breach
Good news — no pwnage found! This email address wasn't found in any of the data breaches loaded into Have I Been Pwned.
FAQs
Find answers to frequently asked questions about Have I Been Pwned, including data sources, breach handling, notification services, and account security.
Notify Me
Get notified if your email address appears in a future data breach. Have I Been Pwned will alert you when we find your email address is exposed.
Passwords
Pwned Passwords is a huge corpus of previously breached passwords made freely available to help services block them from being used again.
Who's Been Pwned
Every breached website added to Have I Been Pwned appears here on the Who’s Been Pwned page. As of today, there are 932 breached sites listed.

consumer security website and email alert system

The homepage of haveibeenpwned.com. The website features white text on a black background. Prominently centered is the site's logo in a white and blue gradient. Below the logo is a search box labeled "email address" with a button beside it labeled "Check". Below the search box is a series of statistics about the size of the website's database.
Have I Been Pwned? (HIBP) is a website that allows Internet users to check whether their personal data has been compromised by data breaches. The site has been widely touted as a … Wikipedia
Factsheet
Type of site Internet security
Created by Troy Hunt
URL haveibeenpwned.com
Factsheet
Type of site Internet security
Created by Troy Hunt
URL haveibeenpwned.com
🌐
Troy Hunt
troyhunt.com › 2-billion-email-addresses-were-exposed-and-we-indexed-them-all-in-have-i-been-pwned
Troy Hunt: 2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned
November 14, 2025 - Would you believe that every single 4-digit number ever has been pwned?! (If you're interested, the ABC has a fantastic infographic using a heatmap based on HIBP data that shows some very predictable patterns for 4-digit PINs.) It pains me to say it, but I have to, given the way the stealer logs made ridiculous, completely false headlines a couple of weeks ago: This story has suddenly gained *way* more traction in recent hours, and something I thought was obvious needs clarifying: this *is not* a Gmail leak, it simply has the credentials of victims infected with malware, and Gmail is the dominant email provider: https://t.co/S75hF4T1es— Troy Hunt (@troyhunt) October 27, 2025
🌐
Avast
avast.com › hackcheck
Has Your Email Been Hacked? Free Data Leak Check | Avast
A simple password — or worse, a common password like “123456”, can be decrypted in seconds. With this and your email, they can access any account that uses that email/password combination, pilfering your data, stealing your identity, and ransacking your digital life.
🌐
Quora
quora.com › My-email-is-pwned-What-should-I-do
My email is pwned. What should I do? - Quora
Answer (1 of 5): Cross the road. Lie down. Die. In the rain. Slowly. No, seriously: (1) Do a thorough virus check on your computer. (2) If you are not sure that your machine is compromised, use a different computer for the following steps. (3) Change your email password immediately if that’s ...
🌐
Google
docs.cloud.google.com › security › google security operations › have i been pwned
Have I Been Pwned | Google Security Operations | Google Cloud Documentation
The breach included 37 million unique email addresses, usernames and passwords stored as unsalted MD5 hashes.", "DataClasses": ["Email addresses", "Passwords", "Usernames" ], "IsSensitive": false, "Domain": "last.fm", "IsSpamList": false, "BreachDate": "2012-03-22", "IsFabricated": false, "ModifiedDate": "2016-09-20T20:00:49Z", "Title": "Last.fm", "Name": "Lastfm", "AddedDate": "2016-09-20T20:00:49Z", "IsVerified": true, "LogoPath": "https://haveibeenpwned.com/Content/Images/PwnedLogos/Lastfm.png" }], "pastes": [ { "Date": null, "Source": "AdHocUrl", "EmailCount": 36959, "Id": "http://siph0n.in/exploits.php?id=1", "Title": "BuzzMachines.com 40k+" }] }, "Entity": "[email protected]" } ]
🌐
Reddit
reddit.com › r/cybersecurity_help › my email has been pwned 17 times, should i make a new one at this point?
My email has been PWNED 17 times, should I make a new one at this point? : r/cybersecurity_help
August 6, 2024 - They cannot do anything to you if you don't click or interact with these spam/ phishing emails. More replies More replies · watchmedrown34 · • 1y ago · You should NEVER get pwned that many times. The issue is you at that point. Use a complex password and enable 2FA. PaddyLandau · • 1y ago · It’s mostly a spam gmail account ·
🌐
Clean Email
clean.email › have-you-been-pwned
Have I Been Pwned? What It Means And How To Protect Your Email
January 12, 2020 - When you're pwned, your data was exposed in a breach. When you're hacked, someone has actually accessed your account. Some hacking attempts don't result in immediate information theft.
🌐
F-Secure Blog
blog.f-secure.com › what-steps-should-you-take-when-your-email-has-been-pwned
4 steps to take if your email has been pwned
Learn the warning signs, common scam types, and simple steps to protect your Gmail account from phishing and fraud.
Find elsewhere
🌐
Uptech
uptech.co.uk › home › have i been pwned – email checker
Have I Been Pwned – Email Checker | Uptech
February 17, 2025 - Find out in seconds if your email address has been stolen or compromised. Enter it in the Have I Been Pwned – Email Checker, and we’ll run it through a comprehensive database of all email addresses stolen over the last few years.
🌐
F-Secure
f-secure.com › en › articles › have-i-been-pwned-4-steps-to-take-if-your-email-has-been-compromised
Have I been pwned? 4 steps to take if your email has been compromised | F‑Secure
May 16, 2024 - And when it comes to the question “Have I been pwned?”, “pwned” means that someone has taken control of your email address, or a user profile that has been created with it.
🌐
1Password
1password.com › haveibeenpwned
Have I Been Pwned | 1Password
That way, even if your data for one site is compromised, the others stay secure. You can't create or remember hundreds of different passwords but a password manager can. Save time by using 1Password's built-in password generator to create secure passwords for every website and service including Amazon, Instagram, and Gmail.
🌐
PauBox
paubox.com › blog › have-i-been-pwned-adds-2-billion-email-addresses-database
Have I Been Pwned adds 2 billion email addresses database
November 11, 2025 - Hunt explained that while Gmail is the largest represented platform with 394 million unique addresses, "80% of the data in this corpus has absolutely nothing to do with Gmail, and the 20% of Gmail addresses have absolutely nothing to do with any sort of security vulnerability on Google's behalf." The dataset spans 32 million different email domains.
🌐
Google Support
support.google.com › mail › thread › 202432993 › my-email-id-was-pwned-what-shall-i-do
my email id was pwned what shall i do ? - Gmail Community
Skip to main content · Gmail Help · Sign in · Google Help · Help Center · Community · Gmail · Terms of Service · Submit feedback · Send feedback on
🌐
TalkTalk
community.talktalk.co.uk › home › our blog › 4 steps to take if your email has been pwned
4 steps to take if your email has been pwned - TalkTalk Community
May 22, 2024 - You may still be able to restore ... email account has been pwned, criminals can set it to automatically forward your messages to the attacker and to send malware, phishing scams, or spam....
🌐
PCWorld
pcworld.com › home › how-to › software how-to
How to check whether your email address is being misused, and what to do next | PCWorld
January 22, 2024 - The result gives tips on how to improve the security of the affected mail account and explains in which breaches your mail password was discovered. The site also offers the option of checking telephone numbers to see whether they appear in breaches. You can also search for stolen passwords. You can also be notified automatically if your email address stored with haveibeenpwned appears in a breach.
🌐
Have I Been Pwned
haveibeenpwned.com › FAQs
Have I Been Pwned: Frequently Asked Questions
It's typically used to imply that someone has been controlled or compromised, for example "I was pwned in the Adobe data breach". A "breach" is an incident where data is inadvertently exposed in a vulnerable system, usually due to insufficient ...
🌐
Have I Been Pwned
haveibeenpwned.com › OptOut
Have I Been Pwned: Opt-Out
Opting out provides several options to ensure your email address is no longer publicly searchable. Once you verify control of the address, you'll be presented with three different models that let you decide how your visibility is removed — both from existing data breaches and any that may affect you in the future. Using Have I Been Pwned is subject to the terms of use
🌐
Troy Hunt
troyhunt.com › the-773-million-record-collection-1-data-reach
Troy Hunt: The 773 Million Record "Collection #1" Data Breach
May 12, 2019 - HIBP never stores passwords next to email addresses and there are many very good reasons for this. That link explains it in more detail but in short, it poses too big a risk for individuals, too big a risk for me personally and frankly, can't be done without taking the sorts of shortcuts that nobody should be taking with passwords in the first place! But there is another way and that's by using Pwned Passwords.