Individuals & society
Free password and email breach checks, plus plain-language steps to recover. No account required.
Free · 1 email/domain check/mo
Sign in to run this tool AI analyses and live lookups run on a metered service, so an account is required. Signing in is free, needs no credit card, and gives you a higher daily allowance than anonymous use ever did. Sign in or create an account
// exposure check
Are you — or your business — exposed?
Four fast, privacy-respecting checks: is your password in a known breach, is your email in a breach, can attackers spoof mail from your domain, and does a public IP have an abuse-report history. Each comes with a clear, AI-guided fix.
FREE
1/1 email+domain+IP check left this month · password checks are unlimited
// 1 · password breach check FREE
Is your password in a breach?
Privacy-first: your password is hashed in your server session and only the first 5 characters of the hash are sent to the breach database (k-anonymity). The password itself is never sent, stored, or logged.
// 2 · email breach lookup
Has your email been in a breach?
// 3 · domain spoofability BUSINESS
Can attackers send email pretending to be your company?
Checks SPF, DMARC, and MX — the records that stop criminals from spoofing your domain in phishing and invoice-fraud attacks. DNS-only, no payloads.
// 4 · IP reputation API + AI
Has this public IP been reported for abusive activity?
Queries IP reputation through the configured server-side API key and combines the returned reputation data with an AI-generated defensive action plan. The key is never sent to the browser.
// who this is for
Freelancers & small teams
Pro unlocks 100 checks/month across email and domain spoofability, with AI remediation plans.
Pro · 100/mo
See Pro →Companies & enterprises
Domain-wide spoofing protection, scheduled re-checks, and team seats. Roadmap: continuous monitoring + alerting.
Talk to us →Frequently asked questions
Is it safe to check my password here?
Yes. Passwords are checked with k-anonymity: only a short hash prefix leaves your browser, the full password is never sent, stored, or logged.
What does the email breach check do?
It tells you whether an email address appears in known public breach data, so you know which accounts to rotate and where to enable multi-factor authentication.
What is domain spoofability?
It evaluates your SPF, DKIM, and DMARC records to estimate how easily an attacker could send forged email that appears to come from your domain.
Is the exposure check free?
Password checks are free and unlimited within fair-use limits. Email and domain checks are free for individuals and metered, with higher limits on Pro.
How to use Account & Exposure Check
Manual & worked example — inputs, output, limits, what it does not do, and a worked example.
Open the reference →