Haveibeenpwned

Have I Been Pwned (HIBP) is an online security tool that allows individuals and organizations to check whether email addresses, usernames, phone numbers, or domains have appeared in known data breaches. Its primary purpose is to help users quickly identify compromised credentials so they can take appropriate steps to secure their accounts and reduce the risk of account takeover or identity theft. The service aggregates publicly known breach data into a searchable, privacy-conscious database accessible via web interface and API.

Key features include a simple lookup function where users can enter an email address or phone number to see if it has been exposed in any recorded breach, along with details such as the affected service and breach date. HIBP also offers a “Notify me” feature that alerts users when their information appears in future breaches. For organizations, it provides domain search and monitored domain services, enabling security teams to identify exposed accounts across their domains. A robust API allows integration with security tools, password managers, and internal monitoring systems, including a “Pwned Passwords” service for checking whether passwords have been previously exposed without revealing the actual password.