Question 1

Do you store the email addresses I check?

Accepted Answer

No — the address is sent to the breach-check service to run the lookup and is not saved in our search history or any database on our side.

Question 2

Where does this breach data come from?

Accepted Answer

We use XposedOrNot, a free, community-maintained public breach database. It doesn't cover every breach that has ever happened, so a clean result is reassuring but not an absolute guarantee.

Question 3

What does "password storage risk" mean?

Accepted Answer

Some breaches exposed passwords in plaintext (readable as-is), which is far worse than a breach where passwords were hashed. When a breach shows a plaintext risk, treat that password as fully compromised everywhere you've reused it.

Question 4

I found a breach — what should I actually do?

Accepted Answer

Change the password on that site immediately, change it anywhere else you reused it, and turn on two-factor authentication. Our free Password Generator can create a strong, unique replacement.

Email Breach Checker

Frequently Asked Questions

More Free Tools