Enter your email address to see whether it appears in known data breaches. Leaked accounts are bought, sold and traded on dark web markets and forums — knowing which of your accounts were exposed tells you exactly which passwords to change first.
How this dark web scan works
Your email is checked against Have I Been Pwned, the largest public index of breached accounts, covering billions of records from hundreds of verified breaches. Most of that data surfaced on dark web forums, Telegram channels and paste sites before it was indexed.
- We never store your email address. It is sent over an encrypted connection, checked, and discarded.
- No trackers, no third-party scripts. The tool runs entirely on this site.
- Tor Browser friendly. The scan works even on the Safest security level with JavaScript disabled.
What to do if your email was found
- Change the password on the breached service — and anywhere else you reused it.
- Switch to a password manager so every account gets a unique password.
- Turn on two-factor authentication, preferably an authenticator app or security key rather than SMS.
- Expect targeted phishing: breached emails are prime targets for convincing scam messages.
- If financial or identity data leaked, consider a credit freeze and watch your statements.
Frequently asked questions
Does this scan the whole dark web?
No tool can index the entire dark web. This scan checks known, catalogued breaches — the same leaked databases that circulate on dark web markets. A clean result means your email is not in any breach indexed so far, not that it can never be exposed.
Why are some breaches marked “unverified”?
Unverified breaches contain real-looking data whose source could not be confirmed with certainty. Treat them as a warning sign and change the affected passwords anyway.
Is my password shown or checked?
No. Only your email address is checked, and no passwords are ever displayed. If a breach lists “Passwords” as exposed data, assume the password you used on that site is compromised.