Check your email against known breaches
How the breach scanner checks your email addresses and domains against known breaches, and what to do about what it finds.
Updated
The breach scanner checks your email addresses and domains against known data breaches, then shows what was exposed and what to do about it. Open it from the Breach scanner page of your dashboard.
Note: If your plan doesn’t include the breach scanner, the page says so. See plans for what each plan includes.
Add an email address or domain
- On the breach scanner page, open Monitored and select Add.
- Your account email is verified straight away. For any other email address, enter the 6-digit code we send to it. The code works for 10 minutes; select Send a new code if it expires.
- For a domain, add the TXT record shown to your domain’s DNS settings, then select Check record. DNS changes can take a while to appear.
Run a scan
Select Scan now. Every verified email address and domain is scanned. A scan takes a short while and keeps running if you leave the page; the results appear when you come back.
Read the results
- Exposures lists each breach that includes your details, what was exposed and how serious it is.
- Open an exposure to see the steps to take for it, such as changing a password or turning on two-step verification.
- When you’ve dealt with an exposure, select Mark resolved. Dismiss hides one that doesn’t apply to you, and Reopen brings either back.
Stop monitoring an email address or domain
Select Remove beside it under Monitored. It won’t be scanned again and its exposures are deleted. This can’t be undone.
