Day 2Safety17 Oct 2026
Have I Been Pwned: check if your email or password was leaked in a data breach
“Har jagah ek hi password use karte ho? Pehle ye check karo.”
Type your email and see every known data breach it appears in, such as Canva, Zomato or bigbasket, so you know which password to change today.
- Free
- No login
- Nothing to install
- by Troy Hunt
How to use it
- 01Open haveibeenpwned.com.
- 02Type your email address and press Check.
- 03Green "Good news" means your email is in no known breach.
- 04Red "Oh no, pwned" lists every breach and what leaked: passwords, phone numbers, addresses.
Use it when
- You use one password on Instagram, Gmail and your college portal.
- You get login alerts or OTPs you did not ask for.
- A service you use announces a breach.
Keep in mind
- If your email shows up, change that password everywhere you reused it, and turn on two-factor authentication.
- A clean result only covers breaches that are public and loaded into the site.
Questions people ask
Is Have I Been Pwned safe to use?
Yes. It is run by security researcher Troy Hunt and used by governments and companies. It only asks for your email, never your password.
My email was pwned. What should I do?
Change the password for that site and anywhere you reused it, use a different password for every account (a password manager helps), and turn on two-factor authentication.
Which Indian breaches are in it?
Several well-known ones, for example Zomato (2017), bigbasket (2020) and Domino's India (2021), alongside global ones such as Canva and LinkedIn.