osintverse-community/hibp-breaches
Lists the data breaches an email address appears in, from Have I Been Pwned: site, date, size, kinds of data
Takes email → finds breach
Key required · Docker
Key required · Docker
Verified publisher
Check whether an email address was in a data breach
3 tools. 1 runs with ot in a sandbox on Windows, macOS and Linux; 2 with otlite on Linux and macOS, no Docker.
When a site is breached, its users' addresses usually end up in published dumps. A breach lookup tells you which known breaches an address appears in, when each happened and what kinds of data leaked (passwords, phone numbers, postal addresses), which dates an account and names services the person used.
With ot, in a sandbox
All email tools →Windows, macOS and Linux, with Docker or Podman. Each tool runs in a read-only container that can reach only the sites it declares, and every result comes back in the same JSON shape.
Without Docker, with otlite
All otlite tools →Linux and macOS. otlite installs each one with pip or git into its own virtualenv, pinned to a version it has tested: otlite install h8mail.
How to check whether an email address was in a data breach
- Look the address up in Have I Been Pwned (hibp-breaches) for the breaches, their dates and the kinds of data.
- Use the breached sites as leads: each is a service the address was registered on by that date.
- Keep to your acceptable-use rules for anything leaked: knowing an address was in a breach is not permission to use the data.
Every registry tool here runs on your machine in a sandbox, and ot auto e:… runs all the installed ones on one value.
Before you run one
Do these tools show passwords?
hibp-breaches doesn't: Have I Been Pwned lists breaches and the kinds of data, never the data itself. h8mail and mailaccess can query sources that return more; both are marked dual-use, and otlite shows a responsible-use notice before installing them.
Do I need a key?
Searching Have I Been Pwned by address needs a paid key from its site, which hibp-breaches reads from your keychain. h8mail works with free sources and can also use premium services with their own keys.
Do these tools send my search anywhere?
No. ot runs each tool on your own machine in a read-only container that can only reach the sites the tool declares, and results stay in your results folder. The registry only counts installs.