DeHashed alternatives: 6 safe ways to check your own data

The Bellingcat investigations toolkit describes DeHashed as a database of compromised credentials. It says you can search by name, email address, username, IP address, physical address, phone number, vehicle identification number and web domain, and that a search by email can return names and passwords. Searching is free, but you need a paid subscription to see the results. We could not read DeHashed's own pricing page, so we do not quote a price.

State of Surveillance quotes DeHashed's terms, which call it a “Data-Mining and Deep Web Asset Search Engine”, require users to be 18 or over, and bar using it to judge someone for credit, insurance, a job or a rental. It quotes a 2021 analyst view that DeHashed's legal status is unclear, and says that is an opinion, not a court or regulator finding. In our own search on 15 November 2026, we found no court or regulator finding against DeHashed.

DeHashed, BreachDirectory and sites like them let a person look up leaked records by someone else's details. BreachDirectory is described as showing a partial password and a hash for an account. The same search that lets you check yourself lets a stranger check you.

That is why this guide does not link to them. Every tool below either shows only your own data, after you prove it is yours, or shows the name of a breach without the data inside it.

Have I Been Pwned lists the known breaches that included an email address. Its FAQ says breached addresses are loaded without their passwords, and that a sensitive breach can only be searched by the verified owner of the address. For a business, its domain search shows breached addresses on a domain only after you prove you are allowed to see them.

Limitations: it shows the breach, not the leaked password, so you change the password for that service yourself. Our Have I Been Pwned guide explains how to read the result.

Mozilla says Monitor is a free service. You can search your email address against public breaches without an account. To check sensitive breaches, you sign up and verify your email first.

Limitations: like Have I Been Pwned, it tells you about breaches, not about the accounts you still hold.

Pwned Passwords checks whether a password has appeared in a breach. Have I Been Pwned says it is free and open source. Your password is hashed on your device and only the first 5 characters of its SHA-1 hash are sent, so the service never sees the password. If a password is in the list, it says you should stop using it.

Limitations: it tells you a password is unsafe, not which of your accounts use it. A password manager answers that.

Google says it can tell you when any of your saved passwords are found online, and flags passwords that are compromised, reused or weak. It runs on the passwords stored in Google Password Manager.

Limitations: it only knows the passwords you saved with Google. Bitwarden users get a similar free report: Bitwarden says its data breach report uses Have I Been Pwned and is available on all plans, including free.

Apple's Detect Compromised Passwords feature tells you if a password you saved may have appeared in a data leak. Apple says your actual passwords are never shared with Apple, and the check works without revealing your accounts or passwords to it. You can turn it off in Settings.

Limitations: it covers passwords saved on your Apple devices only.

In The Event Of connects your own Gmail or Outlook inbox and lists the services that appear linked to you, with known breach exposure. It reads sender, subject, date and delivery details, and may process a short Gmail preview without storing it. It only reads an inbox you connect, so it cannot be used to look someone up by their email address.

Limitations: it is not a breach search engine and does not show passwords. It will not find every account, and it does not close accounts for you. Coverage is strongest for Australian services.

• “Was my email in a breach?” Have I Been Pwned, then Mozilla Monitor for alerts.
• “Is this password safe?” Pwned Passwords, or your password manager's breach check.
• “I want to see which accounts I still have.” An inbox scan, or our guide to finding accounts linked to your email.
• “I have been pwned. Now what?” Follow our steps for what to do next.