Have I Been Pwned
E721441
Have I Been Pwned is a widely used online service that lets people and organizations check whether their email addresses or accounts have appeared in known data breaches.
Observed surface forms (1)
| Surface form | Occurrences |
|---|---|
| Have I Been Pwned API | 1 |
Statements (53)
| Predicate | Object |
|---|---|
| instanceOf |
data breach notification service
ⓘ
online security service ⓘ website ⓘ |
| accessModel |
free Pwned Passwords API with rate limits
ⓘ
free for individual email searches ⓘ paid commercial API tiers ⓘ |
| countryOfOrigin | Australia ⓘ |
| creator | Troy Hunt NERFINISHED ⓘ |
| dataSource |
credential dumps shared on the internet
ⓘ
data provided by security researchers ⓘ publicly disclosed data breaches ⓘ |
| dataType |
breach metadata
ⓘ
email addresses ⓘ password hashes ⓘ phone numbers ⓘ usernames ⓘ |
| developer | Troy Hunt NERFINISHED ⓘ |
| feature |
Pwned Passwords k-anonymity API
NERFINISHED
ⓘ
RSS and email notifications ⓘ breach directory ⓘ paste data search (historically, now limited/changed over time) ⓘ public API for developers ⓘ search by domain (for verified owners) ⓘ search by email address ⓘ search by phone number (for some breaches) ⓘ |
| inception | 2013 ⓘ |
| notableFor |
Pwned Passwords service
NERFINISHED
ⓘ
large collection of breach records ⓘ popularizing public breach search ⓘ |
| offers |
API access
ⓘ
breach notification service ⓘ domain search for verified domain owners ⓘ email address breach search ⓘ password search (Pwned Passwords) ⓘ username breach search ⓘ |
| operatedBy | Troy Hunt NERFINISHED ⓘ |
| primaryLanguage | English ⓘ |
| purpose |
allow users to check if their accounts appear in known data breaches
ⓘ
help organizations assess exposure in credential dumps ⓘ provide notifications of future data breaches affecting users ⓘ |
| securityPractice |
does not store plain-text passwords
ⓘ
stores password data as hashes in Pwned Passwords ⓘ supports HTTPS-only access ⓘ uses k-anonymity model for password queries ⓘ |
| topic |
data breaches
ⓘ
information security ⓘ password security ⓘ |
| usedBy |
enterprises
ⓘ
governments ⓘ individual internet users ⓘ password managers ⓘ security researchers ⓘ |
| website | https://haveibeenpwned.com ⓘ |
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.
this entity surface form:
Have I Been Pwned API