Check your email for data breaches

What happens to your email

• We send it to two places, and only for this check. Our email provider sends you the code. After you enter the code, we send your address to XposedOrNot, a breach database, to look it up. XposedOrNot says lookups are processed and not stored.
• We don't keep it. The results go straight to your screen. To stop abuse, we count how often an address asks for a code, using a scrambled one-way version of it, and delete those counts within a couple of days.
• The only exception is if you ask. If you tick the launch box, we keep your email to send that one email.

Why do I need a code?

Breach results can reveal which services someone uses. The code makes sure only the owner of an address can see its breaches.

What do I do about a breach?

It depends on what leaked. If a password was exposed, change it on that site and anywhere you reused it, and turn on two-step login. If the company still exists and you don't use it anymore, ask it to delete your data: fewer copies means less to lose in the next breach. Some breaches come from big leaked lists with no company behind them. For those, changing passwords is the fix. Your results sort each breach into one of these groups.

Breach data from XposedOrNot. Results only include breaches that have been made public and added to XposedOrNot's database, so a clean result doesn't guarantee your data was never exposed. DataTrail isn't affiliated with XposedOrNot or any company listed. This page is general information, not legal advice.