Skip to content
Have I Been Pwned logo

Have I Been Pwned

Checks whether email addresses or passwords appear in known data breach dumps, and notifies subscribers of new exposures.

From $4.39/moActively maintained

ProductivityMonitoringSecurity
haveibeenpwned.com ↗LinkedInXGitHubFacebookWikipediaWikidata
Open haveibeenpwned.comAlternativesSet it up for my team
Have I Been Pwned: data, price, alternatives
At a glancechecked Oct 30, 2026

3k ★

Use not read yet

For
Individuals checking whether their email appeared in data breaches, and organisations monitoring their domains for exposed addresses.
Price
From $4.39/mopricing page, read Oct 31, 2026Trial & discounts: save 17% yearly
Activity
Actively maintainedrelease 12 days ago · site updated 6 days ago
Company
Superlative Enterprises Pty Ltd · since 2013privacy policy · per Wikidata
How it runs
API
Used for
  • check whether an email address appeared in data breaches
  • monitor your own domains for breached addresses
  • check whether passwords appear in known breach dumps
read off haveibeenpwned.com on Oct 31, 2026
Worth knowingcomputed from what we read · each with its source
  • On the web since 2013, older than 95% of its shelfINITE Atlas
  • 2,980 stars on GitHubGitHub ↗
  • Has an MCP server (1 in the registry)public registry →
Pricingpricing page, read Oct 31, 2026

From $4.39/mo

Trial & discounts save 17% yearly

pricing page

Price Watch: every price change in the Atlas, weekly

The companyeach fact with its source · read Oct 30, 2026
  • Founded2013per Wikidata
Your datawhat they publish, each line with its page · read Oct 30, 2026

These are Have I Been Pwned's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.

How a program reaches itfound, not claimed · read Oct 30, 2026
  • MCP serverhttps://haveibeenpwned.com/mcpnot in the official registry: answered when asked
  • Stateanswers, 17 toolschecked 2026-10-30
  • Address to connecthaveibeenpwned.com/mcp
  • OpenAPI spec18 pathsthe spec ↗
  • MCP docshaveibeenpwned.com/Docs/MCPthe vendor's page ↗

MCP server details →

This card as JSON, for your agent →

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.

Alternatives in Productivityby use, among tools still maintained

Figure and bar: visits/mo, estimate · year: online since

Compare Have I Been Pwned with

Pick up to two.

All 10 alternatives to Have I Been Pwned →

All Productivity tools →

Not it? Say what you need

beta

Three tools from the Atlas for the job you describe, each with what fits and what does not.

From people who use itnot part of the reading

No notes yet. What do you use Have I Been Pwned for?

Sign in to leave a note
Questions this page answers
  • What is Have I Been Pwned?

    Checks whether email addresses or passwords appear in known data breach dumps, and notifies subscribers of new exposures. It is listed in the Atlas under Productivity and made by Superlative Enterprises Pty Ltd.

  • Who is Have I Been Pwned for?

    Individuals checking whether their email appeared in data breaches, and organisations monitoring their domains for exposed addresses.

  • How much does Have I Been Pwned cost?

    Paid plans start at $4.39/mo, per Have I Been Pwned's pricing page on 2026-10-31.

  • Is Have I Been Pwned free?

    No. Its pricing page showed no free plan on 2026-10-31.

  • Is Have I Been Pwned still maintained?

    Actively maintained: release 12 days ago · site updated 6 days ago.

  • Who owns Have I Been Pwned?

    Have I Been Pwned is run by Superlative Enterprises Pty Ltd, per its privacy policy (2026-10-30).

  • How do I cancel Have I Been Pwned?

    In its own words (terms of service, 2026-10-30): “If you do not agree with the changes we make to our Services you may discontinue your use of our Free Services at any time or cancel your Subscription via your Dashboard at any time.”

  • Does Have I Been Pwned give refunds?

    In its own words (terms of service, 2026-10-30): “If you receive Paid Services from us, and in the event of a Material Change, you are entitled to contact us within 30 days of receiving notice of the Material Change to arrange for a refund for any unused pre-paid portion of the Subscription Fee.”

  • What are alternatives to Have I Been Pwned?

    In Productivity, by use: Temp Mail, Automatic Email Manager V10, Cautellus, IrisGo, Postbox Consultancy Services.

How we read a tool

No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.

  • Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
  • Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
  • Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
  • The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.

How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.

How we read every tool → · By INITE Atlas Desk