We have one of the largest known databases with more than 10 billion exposed records. When hackers discover a vulnerability in a website, they use it to access private information stored by the website. They steal the accessed data, decrypt it and publish it on various platforms and forums. We thoroughly search and monitor all such publications and add the findings to our common list.
We respond to new leaks quickly and add them to the database immediately after receipt and verification, plus incremental updates of existing sources. Anyone who has set up monitoring receives notifications shortly after their data appears in the database.
We have been providing our services for over 5 years and are officially registered in the UK. This is confirmed by the companies registry.
Contact us — we're reachable by mail or on Telegram.
Free services display only the source of the leak — we provide a full list of viewable compromised passwords. Free services generally only offer the option to lookup by e-mail; we offer this as well as “search by keyword” and “search by username” for more robust or specific results. We respond quickly to new leaks and add them to our database immediately — hackers may already have your password, don't find out too late.
This is a limitation of free accounts. An upgraded plan is required for full access to all compromised data.
Usually, the upgrade is done automatically and takes effect instantly. But, if you purchased a plan using cryptocurrency, the payment processing can sometimes take several hours to complete, usually sooner.
You can cancel your subscription by accessing our billing portal. If you have purchased a plan with cryptocurrency, it will automatically end with no charges.
Yes. Domain-wide monitoring alerts you the moment any corporate email or credential appears in a new leak.
Critical personal and corporate data: corporate emails, your own emails, user logins and passwords. The number of monitors depends on your plan — from 25 on Monthly up to 1,000 on Enterprise.
Yes — sign up and add your data to monitoring to receive notifications when new data leaks containing it are discovered, including via our Telegram bot.
Yes, and the conditions are very accommodating for developers. The API is limited to 3 requests/second by default (upgradable) and your plan limits.
Email, username, phone number, hash and domain name — plus reverse searches by password and domain on the Enterprise plan. The query type is detected automatically.
The API documentation with a Python usage example is linked in the footer under Resources. Every endpoint ships with request and response samples.
Upload a file with up to 100,000 lines via BulkCheck (up to 500,000 lines per day) — every line is checked against the database and you get a structured report on each compromised record, typically in about 8 minutes.
A file with results for every entry: which sources it appeared in and which data types were exposed. One-click PDF/CSV report export is coming soon.
LeakCheck does not collect or store your search history, however you can perform a search without giving us any personal information. First create a SHA256 hash of your email address (lowercase it before hashing), then select a type called “email by hash”. If anything comes up, it means your information was already compromised. Otherwise, nothing new can be stored. This also works for the reverse password search.
It's an e-mail address search that checks for a user or “keyword” in an e-mail address. For example, a keyword search for “example” will return “example@example.com” and all other results with “example” at the beginning. Moreover, you can add “@” to your query and get entries that explicitly contain only “example”.
It depends. To stay 99% secure, consider using different (and strong) passwords for each site you log in to, and enabling 2FA wherever available. Use disposable email address providers if you're not sure about the security of the website you're visiting. With LeakCheck, you can also sign up to receive notifications when new data leaks are discovered.
