Tool
Have I Been Pwned
A service for checking email addresses and passwords exposed in known incidents.
What an incident result means
An address appearing in a known dataset indicates exposure associated with the reported incident. It does not by itself prove that the account is currently compromised.
Next steps
- change reused passwords;
- use a unique password for each service;
- enable multi-factor authentication, preferring passkeys or security keys when available;
- review sessions, recovery methods, and email forwarding rules;
- watch for phishing that uses old data to appear convincing.