New Version of Data Leak Search Engine Have I Been Pwned Launched

By Netvora Tech News

The latest version of the data leak search engine Have I Been Pwned (HIBP) has been launched today. Users can now search the website to see if their email address has been compromised in a known data breach. The search engine contains email addresses from nearly 15 billion compromised accounts, sourced from almost 900 compromised websites, collection lists, infostealer malware, and information provided by authorities.

In addition to the ability to search for email addresses in known data breaches, HIBP also offers a service called "Pwned Passwords". This is a collection of passwords and password hashes that have been found in data breaches. The dataset can be downloaded or searched online, providing information such as how often a password appears in data breaches. Furthermore, administrators can use the password hashes to check if they match the password hashes in their environment.

New Features in Version 2.0

With the latest version 2.0, the design of the website has been updated. One notable change is that it is no longer possible to search for phone numbers and usernames. This feature was added following incidents at Snapchat and Facebook.

Another significant adjustment is the creation of a separate page for each data breach, providing information on the leaked data. Additionally, users are now provided with clearer guidance on what to do after a data breach.

Pwned Passwords

The Pwned Passwords dataset is a valuable resource for administrators and cybersecurity professionals. It can help identify weak passwords and prevent future breaches. The dataset is regularly updated and contains over 250 million password hashes, making it a valuable tool in the fight against cybercrime.

Search for email addresses in known data breaches
Download or search the Pwned Passwords dataset
Check for password hashes in your environment
Get guidance on what to do after a data breach

With the latest version of HIBP, users can now take proactive measures to protect their online presence and stay informed about potential data breaches.