Exposed? · your data, honestly checked
Has your data
already leaked?
A calm, honest check against real breach records. No account, nothing stored — your password is checked without ever leaving your device.
Check an email
See every known breach an address has appeared in.
Check a password
See if a password has ever appeared in a breach — checked without sending it anywhere.
Hashed in your browser; only a 5-character hash prefix is sent. The password never leaves this device.
Leaking lately
The most recently catalogued real breaches.
Loading the latest…
Breach data is live from Have I Been Pwned, the standard public breach registry. Your email is used only for the lookup and is never stored. Passwords are checked by k-anonymity: your browser hashes the password and sends only the first five characters of that hash — never the password.