How to Check If Your Email Was Exposed in a Data Breach
Have I Been Pwned tells you in seconds whether your email appears in a known breach — and, just as importantly, what that result does and does not mean.
The standard tool: Have I Been Pwned
- Go to the official Have I Been Pwned website.
- Type your email → click "pwned?".
- It instantly shows whether your address appears in any known breach, along with the affected service and what kind of data was compromised.
An important clarification many people misread: your email appearing in this tool does NOT mean someone broke directly into your mailbox or your computer — it means your email was among the data stolen from ANOTHER service (an online shop, a social network) that suffered a security breach in its system.
What to do if your email appears
- Identify which service the specific breach happened at.
- Change your password on THAT specific service.
- Crucially: if you used that same password elsewhere, change it there too — this is the main reason why using a unique password per site matters so much.
Checking specific passwords (not just your email)
The "Pwned Passwords" section of the same site lets you check whether a particular password has appeared in known breaches, using a privacy scheme (k-anonymity) that never sends your full password to the service during the check.
Tip: enable the site's "Notify me" feature to get an automatic alert if your email appears in a new breach in the future, instead of having to check manually every so often.
Frequently asked questions
Does my email appearing on Have I Been Pwned mean I was hacked directly?
Not necessarily — it means your email was among the data stolen from another service that suffered a security breach, not that someone broke into your own account or device directly.
Is it safe to type my password into the Pwned Passwords section?
Yes — it uses a privacy scheme (k-anonymity) that performs the check without ever sending your full password to the service, protecting your information throughout the process.