Breach check, after sign-up

Find out what's already leaked about you

When a company is hacked, its customers' details are often stolen and passed around. A breach check looks up your email address in those leaks, tells you what was taken, and walks you through putting it right.

You'll be able to check your own address after sign-up. Join the waiting list and we'll tell you when it opens. Until then, the examples below show real results for test addresses.

How it works

1. You type your email address. That's the only thing we ask for.
2. We send that address a private link. Only someone who can open your inbox can see your results, so nobody can use Debreach to look you up. The link works for 30 minutes.
3. We check the known breaches. When you open the link, we look your address up in Have I Been Pwned, the most widely used public record of data breaches.
4. You see each breach in plain English. Which company, when, and exactly what was taken: passwords, phone numbers, addresses, card details.
5. You get a to-do list, most urgent first. We don't just show you a list of bad news. We tell you what to change, in order.

The check doesn't store your email address or your results. Some breaches are marked sensitive by the source and are never shown by services like ours, so no check can promise to be complete.

What the results look like

What to do when a password has leaked

A leaked password is the most common finding, and the most fixable. The danger isn't only the site that was hacked: criminals try the same email and password on hundreds of other sites, hoping you reused it.

1. Change it on the site that was breached. Go to the site yourself. Don't follow a link in an email.
2. Change it everywhere else you used it. Start with your email account: whoever controls your email can reset every other password you have.
3. Turn on two-step verification for your email and your bank, so a password alone is no longer enough.
4. Stop it happening again. Use a password manager, so every site gets its own password and you only have to remember one.

Set up a master password

If more than a password leaked

• Phone number: expect scam calls and texts. Forward scam texts to 7726, and ring 159 to reach your bank safely.
• Address or date of birth: check your credit report for accounts you don't recognise.
• Card or bank details: check your statements and tell your bank straight away about anything odd.