Category: Security, Data Breach, Privacy

Have I Been Pwned is a free service that lets you check whether your email address, phone number, or password has appeared in known data breaches. Maintained by security researcher Troy Hunt, the site aggregates data from thousands of publicly disclosed breaches and allows anyone to search for their own accounts without creating an account or providing personal information. It also tracks pastes from public sources where leaked data is shared.

You can subscribe to notifications for a specific email address, so you receive an alert if it appears in a future breach. The site also offers a domain search for organizations that want to monitor whether employee accounts have been compromised. Passwords can be checked anonymously using k-anonymity, meaning your full password is never transmitted. Have I Been Pwned is a simple, essential tool for anyone who wants to know whether their credentials are circulating among attackers.