In danger, call emergency services first. Who to call →

Check your exposure, for free.

No sign-up walls, no "free trial" that bills you later. These are the same tools security professionals use, run by the organisations that built them.

Password generator

Generated in your browser and never sent anywhere, not to us, not to any server. Refresh the page and it's gone.

Five different things, often confused

These tools measure different kinds of exposure. Knowing which one you're looking at changes what you should actually do next.

Email in a breach

Your email address appeared in a leaked dataset from a site you had an account with. Change that site's password if you haven't already.

Password in a breach

A specific password has been seen in leaked data. Stop using it anywhere, immediately, especially if reused.

Infostealer malware

Software on a device silently copied saved passwords and session cookies. This needs a device clean-up, not just a password change.

Phishing

You were tricked into typing credentials into a fake page. The credentials are compromised even though no "breach" technically occurred.

Data-broker listing

Your name, address or phone number is for sale from public records and marketing lists, legally, separate from any hack. Opt-out processes exist per broker.

A clean result isn't a clean bill of health. These tools only know about what's been publicly catalogued. Not being listed doesn't mean an account was never compromised, it means it isn't in that particular dataset yet. Combine a clean check with good habits: a password manager, unique passwords, and multi-factor authentication everywhere it's offered.

Want a fuller picture?

The personal cybersecurity health check walks through identity, email, banking, devices and social media in about five minutes, and tells you the single highest-leverage fix for your situation.

Take the health check