What does “pwned” mean?
“Pwned” means owned or compromised: your account data was exposed in a data breach.
Do you store what I search for?
No. Searches are hashed in memory, matched against hashed breach data and discarded. Nothing identifying is logged.
Is it safe to enter my password?
Yes. Your password is hashed in your browser and only a 5-character hash prefix is used for the lookup, so neither we nor anyone else sees it.
Why can’t I see some breaches?
Sensitive breaches are hidden from public search. Subscribe to alerts and verify your address to see them.
I was pwned. What should I do?
Change the affected passwords, turn on two-factor authentication, use a password manager and follow the remediation checklist shown with your results.
Can I check my whole company?
Yes. The domain search shows aggregated breach exposure for every address on a domain, and the batch checker handles lists of addresses.