Have I Been Pwned: what it is and how to use it
Have I Been Pwned is a free service, created by Troy Hunt, that shows whether an email appeared in data breaches. For bitcoin holders, it helps find which accounts and passwords were already exposed, especially those tied to crypto exchanges.
Overview
| Category | Directories and checks |
|---|---|
| KYC required | No |
| Open source | to verify |
| Price | Free (Oct 2026) |
| Official site | haveibeenpwned.com |
How do you use Have I Been Pwned?
- Type haveibeenpwned.com into the address bar and check the exact address, because lookalike fake sites exist.
- Enter your main email in the search field. The site asks only for the email address.
- Note which breaches appeared and what type of data was exposed: only a password, or also phone, address and date of birth.
- Repeat the lookup with the other emails you use often.
- For each breach that exposed a password, note the service so you can change the password later; if it is a crypto exchange, mark it as high risk.
What are the limits and cautions?
- Never type your password, seed phrase or documents: any site asking for these to "check for leaks" is a scam. Legitimate checkers ask for the email address at most.
- Appearing on the list does not mean someone broke into your account, only that your data was in a leaked database.
Other Directories and checks tools
How to Buy Bitcoin Anonymously — See the book on Amazon