Have I Been Pwned

What Have I Been Pwned actually is

Troy Hunt's index of leaked credentials, searchable by email address or phone number. Results name the company breached, the date, and which fields were exposed. A separate checker tells you whether a specific password has appeared in a dump, without ever receiving that password.

Why it is worth your time

The password check uses a partial-hash trick so the site never learns what you typed, which is a rare piece of honest engineering.

Common questions

Is Have I Been Pwned free?

Yes. Have I Been Pwned is free and does not ask you to register or hand over an email address before you can use it.

How long does Have I Been Pwned take?

Good within five seconds of loading. We file it under "Instant" — type your email, find out which breaches you are in.

Does Have I Been Pwned work on a phone?

Yes. Have I Been Pwned works on a phone as well as it does on a laptop.

What kind of site is Have I Been Pwned?

We list it under Practical Magic — free tools that feel like cheating. The password check uses a partial-hash trick so the site never learns what you typed, which is a rare piece of honest engineering.