Check whether your email address has turned up in a known data breach. Free, no signup, instant.
Checking your email against known breaches…
Your email wasn't found in any breach we track. Stay vigilant — new breaches appear regularly.
Set up free alerts →It appeared in the records below. Here's what to do about it.
We do not keep the address you check.
No account, no password, no email to confirm. Just type and check.
We look it up in real time and do not keep the address. We do not write it to a database or mailing list.
No signup and we do not sell your data. Hosting logs and a privacy-oriented analytics beacon can still record that the page was visited.
and everywhere you reused it — email, banking, payments first.
Reuse change order →an authenticator app beats SMS. A stolen password is useless without it.
2FA / passkeys playbook →one strong password per account — reuse is why breaches cascade.
Password manager after a breach →most fraud appears within 30 days. Set alerts, freeze credit if needed.
Credit freeze guide →it may be leaked even if your email is clean.
Check now →A few of the verified leaks in our index. New breaches are added as they surface.
| Breach | Records | Year | Exposed |
|---|---|---|---|
| Synthient Credential Stuffing Threat Data | 2.0B | 2025 | Email addresses, Passwords |
| Collection #1 | 772.9M | 2019 | Email addresses, Passwords |
| 509.5M | 2019 | Dates of birth, Email addresses, Employers | |
| MySpace | 359.4M | 2008 | Email addresses, Passwords, Usernames |
| Twitter (200M) | 211.5M | 2021 | Email addresses, Names, Social media profiles |
No catch, no friction.
No "upgrade to see results," no credit card. Full results for every match in our catalog.
Searched against the current index, not a stale cached snapshot.
We don't email you unless you ask. Alerts are opt-in, one click to leave.
We do not keep the address you type into the checker, write it to a database, or add it to a mailing list. Hosting logs and a privacy-oriented analytics beacon can still record that the page was visited. See the privacy policy for the full list.
Yes. There is no signup, no credit card, and no paywall in front of results. Every incident we can search is included in a free check.
We show the matches we found and the data types those incidents exposed. Then we walk through five practical steps: change reused passwords, turn on two-factor authentication, use a password manager, watch your accounts, and check whether the password itself was leaked.
That means your address was not in the incidents we currently search. New breaches appear regularly, so a clean result is not a lifetime guarantee. You can turn on free alerts if you want an email only when that address shows up later.
Yes. The password leak checker looks up a password without sending the full password to us. The website checker is a separate lookup for a link or domain you were asked to trust.
Start with the after-breach playbook, the data breach guide, and the account security checklist. If you want to close leftover accounts or remove yourself from people-search sites, use the delete-account guides and the data broker opt-out hub.
