Checks if your email appeared in known data breaches, and whether your password is in public dumps. Password is never sent in full — k-anonymity protocol sends only first 5 bytes of SHA-1.
💡 What to do if you were breached
  1. Change password everywhere you used the same/similar.
  2. Enable 2FA (TOTP, not SMS) on important accounts.
  3. Use a password manager (Bitwarden, KeePass).
  4. Subscribe to HIBP Notify for instant alerts.