Privacy UnpackedPrivate by design
My breaches
Which breaches might involve you, and one plan for what to do. Worked out on your device: the companies you add never leave it.
1. The companies you use
Or add every site in your password manager: export it as a CSV file (Bitwarden, 1Password, Chrome, Firefox, Apple Passwords and LastPass can all do this) and open it here.
Only the website addresses are read from the file and kept on this device; the passwords in it are never read, stored or sent anywhere. Delete the exported file afterwards: it holds your passwords in plain text.
2. Breaches that may involve you
Add the companies you use, and any breach on the tracker or in Have I Been Pwned’s database that matches them appears here.
3. Your plan
One list of steps for everything that was exposed, most urgent first. Tick them off as you go.
How this stays private
This page downloads the whole list of breaches (the same for every visitor) and does the matching in your browser. It loads no analytics and no ads. Your companies, your ticks and the date of your last visit are kept in this browser’s storage and nowhere else: we cannot see them, and there is no account. “Forget everything” deletes them. A match is by name or web address, so check the breach’s own page or the company’s notice to be sure it was your account.
Want to know if your email address was in a breach? Have I Been Pwned checks that; this page never asks for it.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.