Email Breach Check
Check whether your email address has appeared in a publicly known data breach. A free account is required. The address is sent over HTTPS to Have I Been Pwned for the lookup and is not stored by WhatsMyIP.now.
What To Do If Your Email Was Breached
Finding your email in a breach is alarming, but swift action limits the damage. To understand how these incidents happen in the first place, read our guide on what a data breach is. Follow this checklist:
- Change your password immediately on the affected service and any other site where you reused that password.
- Enable two-factor authentication (2FA) on the affected account and ideally on all important accounts.
- Use a unique password per site - A password manager like Bitwarden or 1Password makes this easy.
- Watch for phishing emails that may reference information from the breach to appear legitimate.
- Check your financial accounts if payment card data was exposed.
- Monitor your credit if personal details like your name, address, or SSN were included.
- Report suspicious activity to the breached service and, if financial fraud occurred, to your bank.
How We Protect Your Privacy
Email breach searches and password breach searches use different privacy models. HIBP requires the full email address for an account lookup, while its Pwned Passwords service supports hash-prefix k-anonymity. Our FAQ explains how to check if a password was breached.
| Step | What Happens |
|---|---|
| 1 | Your browser sends the address to WhatsMyIP.now over HTTPS after you submit the form. |
| 2 | Our server sends the full address to the Have I Been Pwned breached-account API over HTTPS. |
| 3 | HIBP returns matching breach names and dates. |
| 4 | WhatsMyIP.now displays the result and does not save the submitted email in its tool-history database. |
ⓘ All breach data sourced from haveibeenpwned.com by Troy Hunt, used under the HIBP API.
Frequently Asked Questions
What should I do if my email appears in a data breach?
Change the password on the breached site immediately, and on any other account where you reused the same password. Enable two-factor authentication on important accounts such as email and banking. Watch for targeted phishing - Attackers know which service leaked your address. A password manager makes it practical to use a unique password for every account.
Is it safe to enter my email into a breach checker?
The check sends the email address to Have I Been Pwned over HTTPS because its breached-account API requires the full address. WhatsMyIP.now does not store the submitted address. Do not use the tool if you do not want the address sent to that provider.
Can my data be removed from a breach?
No. Once a breach is published, copies of the data circulate on forums and dark web markets indefinitely, and no service can recall them. The realistic response is damage control: change exposed passwords, enable two-factor authentication, and treat the leaked details - Email, phone, address - As information attackers may use in future phishing or impersonation attempts.
Related Tools
Sources & Further Reading
The technical claims on this page are drawn from the primary specifications and vendor documentation below.
- Have I Been Pwned — API documentation Have I Been Pwned
- NIST SP 800-63B — Compromised credential checking NIST