Loading page
About this tool
Weighted response plan for a leaked or published home address: physical safety, public-source removals and identity-check fixes.
The Home Address Exposure Checklist scores your response to a leaked or published residential address across 17 weighted steps, grouped by the window each one belongs in — first 24 hours, first week, first month, and ongoing. Because an address cannot be rotated the way a password can, the score is weighted towards the two things that actually reduce harm: keeping the household physically safe, and stopping banks, telcos and password-reset flows from treating the address as proof of identity. Enter the date you found out and the tool flags which steps have already slipped past their window.
Open Home Address Exposure Checklist on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Every step carries a 24-hour, one-week, one-month or ongoing deadline, and overdue items are surfaced separately.
Steps that close an account-recovery path score far higher than cosmetic clean-up, so effort lands where it matters.
The address itself is never entered — you tick steps, and the tool stores no personal data at all.
Write down exactly which other fields leaked with it, then tell everyone who lives there. An address alone is low value; address plus full name, phone number and date of birth is the combination that passes telephone identity checks, so the response depends entirely on what travelled with it.
Yes. Open the Street View image of the property, choose Report a problem, and request a blur of the house. Google applies the blur to the panorama permanently, so it also survives future imagery of the same building — which is why you should be sure before submitting.
Only if keys or entry codes leaked too. Rekeying does nothing about an address that is merely public. If a gate PIN, smart-lock code, building access code or key-safe combination was part of the same breach, change those within the week and delete the old codes from the device.
Because address confirmation is still a routine step in telephone identity checks and in SIM-swap attempts. Asking your bank and mobile operator for a spoken passphrase, a callback-only rule or a port-out lock replaces the one detail an attacker now knows. This is general information, not legal advice — if the exposure came with threats, involve the police and a lawyer.