TOOL LIBRARY / SECURITY, PRIVACY & ACCESS
Have I Been Pwned
Checks whether an email address appears in known data breaches and offers alerts for future matches.
What it is
Have I Been Pwned searches known breach records for an email address and shows which incidents included it and what kinds of information were exposed. It also offers email alerts, a separate password-checking service, and domain monitoring for organizations that verify ownership or control.
Ways to use it
Ideas from real executive operations work. Take the ones that fit.
- Check your work email address after learning that a service you use has suffered a breach.
- Set an alert for future breach records involving an address you control.
- Identify which old service accounts deserve a password and access review.
- Give IT the named breach and exposed data types when raising an account-security concern.
- Ask the authorized domain owner to set up company-wide monitoring under the appropriate plan.
Our take
Useful for turning a vague concern about an exposed email address into a specific follow-up. Record the affected service and exposed data, then check password reuse and account protection with the responsible person. Domain monitoring is more appropriate for IT than ad hoc checks across a staff list.