Check an email address with Have I Been Pwned’s breach search, and check passwords separately with Pwned Passwords or a supported password manager’s security checkup. These searches can show whether an address or password appears in the breach data available to the service; a clean result cannot prove it was never exposed. If a password is flagged, change it anywhere you reused it.
Check whether your email address appears in breach data
- Open Have I Been Pwned and search for your email address.
- Review the breach names and exposed data categories shown in the results. The listing indicates that the address appears in breach records available to the service; it does not establish that someone currently controls your account.
A search with no matches is not proof that the address was never exposed. Have I Been Pwned says some sensitive or retired breaches are not included in ordinary on-demand searches. Its results are limited to the data it makes available for lookup.
Check whether a password was exposed
Use Pwned Passwords to check an individual password against known breached-password data. This is separate from searching an email address: Have I Been Pwned says its email breach searches do not include the corresponding passwords. An email match therefore does not reveal which password was used or identify the password associated with that breach.
Do not enter a password into an unfamiliar breach-checking website. Use a service you trust, and if you are unsure about a password, change it through the account provider’s official site or app.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute#1 Best Overall
- ✅ PROTECT ONLINE ACCOUNTS – A password manager, two-factor security key, and secure communication token in one, OnlyKey can keep your accounts safe even if your computer or a website is compromised. OnlyKey is open source, verified, and trustworthy.
- ✅ UNIVERSALLY SUPPORTED – Works with all websites including Twitter, Facebook, GitHub, and Google. Onlykey supports multiple methods of two-factor authentication including FIDO2 / U2F, Yubico OTP, TOTP, Challenge-response.
- ✅ PORTABLE PROTECTION – Extremely durable, waterproof, and tamper resistant design allows you to take your OnlyKey with you everywhere.
- ✅ PIN PROTECTED – The PIN used to unlock OnlyKey is entered directly on it. This means that if this device is stolen, data remains secure, after 10 failed attempts to unlock all data is securely erased.
- ✅ EASY LOG IN –No need to remember multiple passwords because by plugging OnlyKey to your computer, it automatically inputs your username and password. It works with Windows, Mac OS, Linux, or Chromebook, just press a button to login securely!
Check passwords saved in Google Password Manager or Chrome
If you save credentials with Google, run Password Checkup to review saved passwords for exposure, weakness, and reuse. Google also provides password warnings in Chrome. Google says Chrome encrypts saved credentials before comparison, but its checked breach list may be incomplete.
- Open Google Password Manager and select Check Passwords.
- Review any exposed, weak, or reused-password findings.
- For a password warning in Chrome, go directly to Password Checkup to confirm it, then change unsafe passwords.
Google’s steps and available labels can vary by device and version. Use Google’s Password Checkup instructions if you cannot find the option.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What each check tells you
| Check | What it searches | What a match means | Important limit |
|---|---|---|---|
| Have I Been Pwned email search | An email address against breach records available to the service | The address appears in one or more listed breach records | Does not reveal the associated password or prove current account access; some sensitive or retired breaches are not returned in ordinary searches. |
| Pwned Passwords | An individual password against known breached-password data | The password appears in the service’s breached-password data | Does not identify the email address or account where it was used. |
| Google Password Checkup | Passwords saved in a supported Google password manager | A saved password may be exposed, weak, or reused | Only checks saved credentials, and Google says its breach list may be incomplete. |
What to do if a password or account may be at risk
Change exposed and reused passwords
Change the password on the affected service and anywhere else you used the same one. Give every account its own strong password; Google recommends using a unique password for every account. A password manager can generate and store unique credentials so you do not need to reuse or memorize them.
Turn on two-factor authentication
Enable two-factor authentication (2FA) wherever it is available. A physical security key is one optional sign-in method, but it is not needed to check whether credentials appear in breach data.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #3
- Requires 3 "AAA" batteries (included)
- Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs
Secure your email account if you suspect someone accessed it
Your mailbox can receive password-reset links for other accounts. If you suspect it was compromised, change its password, review recovery details and forwarding rules, enable 2FA, and check account activity. If the service offers an option to sign out other devices, use it to end sessions you do not recognize. The FTC recommends protecting email with a strong password and 2FA.
A breach-search result alone is not evidence that an account is currently under someone else’s control. Treat signs of actual access—such as unfamiliar activity or changed recovery details—as a separate account-security problem and follow the provider’s recovery process.
Quick Recap
Best Value
- FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
- SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
- DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
- DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
- Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
