Free data breach checker: email leak detection, password security, SSL check, DNS lookup, and more — all in one place.
Register with your email — no credit card needed
Search billions of breach records — your data stays private
Change passwords, enable 2FA, use a password manager
Search billions of breached records from Have I Been Pwned
See breach name, date, and what data was exposed
Get notified immediately when new breaches affect you
Don't wait — we'll watch for new breaches 24/7
Monitor breach exposure across every domain your organization owns — employees, customers, subsidiaries.
Click the tool you need — no login required for these free checks.
Check SSL certificate issuer, expiry date, days left, and cipher details.
Check which TLS versions (1.0–1.3) a server supports.
Check if a website has essential security headers (HSTS, CSP, X-Frame-Options, etc.).
Look up DNS records (A, AAAA, MX, NS, TXT, SOA, CNAME) for any domain.
A data breach is when sensitive, protected, or confidential data is copied, transmitted, viewed, stolen, or used by an unauthorized individual. Common examples include hacked websites leaking email addresses, passwords, or credit card numbers.
We use XposedOrNot, a public database of known data breaches. Your email is transmitted securely via HTTPS and used only for the breach lookup. We do not store your email. Note: unlike password checks, email lookups cannot use k-anonymity because breach databases are indexed by email address.
Yes. We use k-anonymity: only the first 5 characters of your password's SHA-1 hash are sent to the API. Your full password never leaves your browser.
Password entropy measures how unpredictable your password is, in bits. Higher entropy means a stronger password. A password with 70+ bits is considered very strong. The calculation is done entirely in your browser — nothing is sent to our server.
Free users get core tools (email check, password tools, hygiene checklist). Premium (€1/month) unlocks all tools: unlimited email checks, IP reputation, geolocation, URL scanning, DNS lookup, SSL check, breach timeline, data class explorer, and more.
We store minimal data for registered users only (email hash, premium status). Email breach checks are not logged permanently. We do not sell or share your data.
Yes, you need a free account to access the dashboard and all tools. Registration only requires an email and password.
Add any email address to your monitoring list from the dashboard. Our automated system checks all monitored emails every 24 hours against the latest breach data. You can monitor your own email, family members, or business addresses — all from one dashboard. This is a Premium feature (€1/month).
Yes! When our system detects that a monitored email has appeared in new breaches, you will receive an instant email alert. The alert includes details about what data was exposed and which breach(es) were found. You will not receive alerts for breaches that were already known — only genuinely new discoveries.
All monitored emails are automatically checked once every 24 hours. You can also manually trigger a check from your dashboard at any time. Most major breaches are added to the database within 24-48 hours of public disclosure, so daily checks ensure timely alerts.
Our breach database is updated continuously as new breaches are discovered and verified. We aggregate data from multiple sources including Have I Been Pwned, XposedOrNot, and other threat intelligence feeds. Major breaches are added within 24-48 hours of public disclosure.
Yes. You can delete your account and all associated data at any time from your Dashboard settings. We do not retain your email searches — only account metadata (email, subscription status) is stored, and it is permanently deleted upon account removal.
Change your password immediately on the affected site and anywhere else you reused it. Enable two-factor authentication. Check our security checklist for a step-by-step guide. Consider a password manager to generate unique passwords for every site.