BreachCheck
Check if your email address is in a data breach
Type your email, or a website such as . Your email goes only to the lookup service for this check. This site doesn't keep it.Largest breaches
Recently added Live from Have I Been Pwned
Has your password leaked?
Leaked passwords end up on lists that attackers try first. The check never sends your password: this page turns it into a fingerprint (a SHA-1 hash) on your device and would send only the first 5 characters. The server answers with every leaked fingerprint that starts the same way, and the match happens here.
All breaches
Every breach in the catalogue, with what was taken and how many accounts. Tap one for the details.
About Sime Breach Check
Sime Breach Check tells you if an email address, website or password has turned up in a known data breach, so you know which passwords to change.
What it checks
Where the data comes from
The breach catalogue is the public list published by Have I Been Pwned, , used under the Creative Commons Attribution 4.0 licence. New breaches appear here by themselves within a few hours of Have I Been Pwned adding them. Email lookups use XposedOrNot (xposedornot.com), a free breach search service (about 25 checks an hour per internet connection). Password checks use Have I Been Pwned's Pwned Passwords range service, which only ever receives the first 5 characters of the password's fingerprint. Sime Breach Check is a separate tool and isn't connected with Have I Been Pwned.
If you were in a breach
- Change the password for that site, and anywhere else you used the same one.
- Turn on two-step sign-in where you can.
- Use a password manager so every site gets its own password.
- Watch for emails and messages that mention the breach. Scammers use them.