Has this email address leaked?

Check if an email address has appeared in a known breach, infostealer log, or leaked credential dump.

Breach forumsInfostealer logsCombolist dropsPublic breaches
We never show the leaked password itself, and this tool is built to check, not to build a list. The address is used only to run your check.
What it checks

We search the same breach forums, infostealer logs, and combolist data behind our full platform for any record tied to the email address you enter.

Why this matters

A leaked email on its own isn’t the risk. A leaked email paired with a working password is. Attackers buy and test these pairs against banking sites, email providers, and corporate logins, a technique called credential stuffing. Knowing an email has leaked is the first signal that the password behind it needs to change, everywhere it was reused.

What to do if it shows up

Change the password on the account tied to that email, and on anything else using the same password. Turn on multi-factor authentication where it’s available. If the email is a work account, tell your IT or security team, since the same credential may be reused on internal systems too.

FAQ

Good to know.

Do you store the email addresses people search?

This tool is built to check, not to build a list. Refer to our privacy policy for exact data handling.

Can I check an email that isn’t mine?

The tool doesn’t require proof of ownership, but use it responsibly. It’s meant for checking your own accounts or accounts you’re authorized to monitor, such as employee emails at a company you manage.

One email at a time doesn’t scale past a handful of people.

Live Search lets your team check any email, domain, or username on demand, and the Watch List catches new leaks automatically after that.