My email is in a breach. Has my account been hacked?

Not necessarily. It means a service you used was breached and your details were copied. The risk is password reuse: if that password is used elsewhere, change it there too.

Why does the page say the service is not enabled?

Account-level breach search uses a paid API from Have I Been Pwned. Until our key is configured you can run the same check directly on their site.

Can I check my phone number?

Have I Been Pwned supports phone numbers in some breaches; our tool currently checks email addresses only.

Has my email been in a data breach?

Breached databases are what attackers use for password-reuse and targeted phishing. Enter the address you use for banking, college or work.

The address is sent to our server for the lookup and is not stored. Results are cached for 10 minutes and then discarded.

Built and maintained by the Arventiq Labs team in Bengaluru. Free for anyone, source on GitHub (MIT). Results are indications, not verdicts. Something wrong? Tell us.