Enter your email
We validate the format in your browser, then submit it only when you choose to check.
Security check Private by design
Was your email
in a data breach?
Search known breach records in seconds. Get a clear answer and practical next steps—without creating an account.
No account requiredOne check, no sign-up wall
No application storageYour search isn’t retained by us
Resilient lookupTwo independent breach providers
How it works
A straight answer,
not a scare tactic.
Check known records
The address is checked directly over HTTPS by XposedOrNot. If it is unavailable, a shortened SHA-256 hash is checked through LeakCheck instead.
Take the right action
See the affected services and exposed data types, then change reused passwords and enable MFA.
Privacy disclosure
Your email is checked, not collected.
Breachlight does not store, sell, or log submitted email addresses or search hashes. The primary check sends the address directly over HTTPS to XposedOrNot, which states that searches are processed in memory and not logged. If that service is unavailable, LeakCheck receives only the first 24 characters of a locally generated SHA-256 hash and states that queries are not stored. No breach database can guarantee complete coverage.