Email breach check: is your email in a data breach?
Enter an email address and DuckINT checks several breach and infostealer-log indexes at the same time, plus public profiles linked to the address. Each hit names the index that reported it and the breach or log it came from. Leaked passwords stay hidden until you choose to reveal them.
What it shows
- Data breaches that include the address, with the breached service and date where the index gives them.
- Infostealer logs: whether malware on an infected device captured logins for the address.
- Public profiles tied to the address, such as Gravatar and GitHub, and the mail domain's records.
- Whether the address's username is taken on other sites, shown as possible matches only.
Sources it checks
One search asks all of these at the same time. Each result names the one that returned it.
What to do with the result
- Change the password of every breached service you still use, and everywhere you reused it.
- Turn on two-factor authentication, preferably an authenticator app or a security key.
- If an infostealer log lists the address, scan the infected device and sign out of all sessions: session cookies may have been taken too.
Questions
- Is the email breach check free?
- Yes. The Free plan includes a daily allowance of searches; a search that finds nothing does not use it.
- Why do different breach checkers give different results?
- Each index holds different breaches and adds them at different times. DuckINT asks several at once, so one search gives a fuller picture, but no index has every breach.
- Can I stop my email from being searched?
- Yes. The removal page excludes your email address from DuckINT searches, free of charge.