Have I Been Pwned

Have I Been Pwned, often shortened to HIBP, lets people search for their details in known data breaches and sign up for alerts. A person can enter an email address to see which known breaches exposed it, and the site displays a timeline of breaches and any appearances in public text dumps called pastes.

Beyond the public search, the service offers domain search for monitoring corporate domains, a Pwned Passwords tool for checking whether a password has been exposed, notification signups for future breaches, an API, NIST compliance guidance and an MCP server. Security teams, developers and managed service providers use it to monitor exposure at scale. Users can also opt out of having an address listed.

HIBP is a hosted service with a dashboard, a pricing page for subscriptions and a demos section. It carries sponsored recommendations for password managers and invites donations, and it publishes terms of use, a privacy policy and a data processing agreement for organizations that rely on it.