Data breach check
When a service is hacked, email addresses, passwords and phone numbers end up in lists. Here you see which known breaches your address appears in and what to do then.
Your email address
- You enter your address.
- We send you a link. It is valid for 30 minutes and can be opened once.
- Only when you open it do we query the sources and show the result in your browser.
What happens to your address
- Until you open the link, the address is held encrypted by us, for 30 minutes at most. After that it is deleted.
- The address goes to LeakCheck (London) as a truncated checksum, not in plain text. A checksum can be recomputed for known addresses; LeakCheck states that it does not store queries.
- We keep the result nowhere: it is not cached and appears once in your browser.
- We never retrieve passwords or records from breaches. We receive the names of the breaches, the month and the kinds of data.
- To stop anyone using us to flood other people’s inboxes, we send at most two emails per mailbox per day. The counter is a checksum with a daily key, not an address, and expires after two days.