How to Check If Your Info Is on the Dark Web

Updated 5 November 2026 · Standard formula, shown below

This guide shows you practical ways to find out if your email, passwords, or other personal details have appeared in data breaches and are circulating on the dark web. You’ll learn how to use free breach-checking services, what to do with the results, and how to protect yourself going forward. Before you start, gather the email addresses and phone numbers you’ve used for online accounts.

What You’ll Need

The email addresses you use for online accounts (personal, work, and old ones)
Phone numbers you’ve used for two-factor authentication or account recovery
A web browser on a computer or phone
Optional: a password manager to store and check your passwords

Step-by-Step

Check your email on Have I Been Pwned. Go to haveibeenpwned.com and enter your primary email address. The site will show you which known data breaches include that address. Repeat for every email you’ve used, including old ones.
Use the same service for phone numbers. On the same site, click the “Phone numbers” tab and enter your phone number. This is a separate search and may return different results.
Try a dark web monitoring service. Many password managers (like 1Password, Bitwarden, or Dashlane) include dark web monitoring. If you use one, look for a “Dark Web Monitoring” or “Breach Watch” feature and add your email addresses there.
Check with Google’s Dark Web Report. If you have a Google account, go to myaccount.google.com, then Security, and look for “Dark web report.” It will scan known breach databases for your email, phone, and other details you’ve opted in to monitor.
Search for your username. Use a search engine to look up your common usernames (the ones you use on forums, gaming, or social media). Sometimes breached data files are posted publicly with usernames and passwords.
Review the results. If a breach is found, note which site it came from and what data was exposed (password, address, credit card, etc.). The breach checker will usually tell you the date and the type of data.
Change passwords immediately. For any account that appears in a breach, change the password right away. Use a unique, strong password for each site.
Enable two-factor authentication (2FA). Turn on 2FA for all important accounts, especially email, banking, and social media. Use an authenticator app rather than SMS when possible.
Check for password reuse. If you used the same password on multiple sites, change it on all of them. A password manager can help you generate and store unique passwords.
Monitor your credit and bank accounts. If your financial details were exposed, check your statements regularly and consider placing a fraud alert with a credit bureau.

Common Mistakes

Only checking one email. You likely have multiple email addresses; each one needs to be checked separately.
Ignoring phone numbers. Phone numbers can be exposed in breaches too, and they’re often used for account recovery, making them valuable to criminals.
Not acting on results. Finding a breach is only the first step. If you don’t change passwords and enable 2FA, the exposure remains a risk.
Assuming no news means no risk. Breach checkers only know about breaches that have been discovered and added to their database. New breaches happen all the time, so check periodically.
Using the same password everywhere. Even if you don’t see a breach, password reuse means one breach can compromise many accounts.

Tips

Set up alerts. Have I Been Pwned offers a “Notify me” feature that emails you when your address appears in a new breach. Use it.
Use a password manager. It generates and stores strong, unique passwords for each site, so you don’t have to remember them.
Use unique email aliases. Some services let you create aliases for each site, so if one is breached, you know exactly which site leaked it.
Check regularly. Make it a habit to check your email on Have I Been Pwned every few months.
Freeze your credit. In many countries, you can freeze your credit for free, which prevents criminals from opening accounts in your name.

Troubleshooting

Site is down or slow. Have I Been Pwned is popular and may be slow. Wait a few minutes and try again, or use an alternative like Firefox Monitor (which uses the same data).
You get a 404 or error. Make sure you’ve typed your email correctly. If the site is truly down, wait and retry later.
Google’s Dark Web Report doesn’t show anything. That’s good, but it only covers data Google has indexed. It’s not a complete picture, so still check Have I Been Pwned.
You find a breach but don’t know which account it is. The breach checker will list the site (e.g., LinkedIn, Adobe). If you don’t recognize it, it might be an old account you forgot about. Search your email for that site’s name to find the account.
You can’t change a password because the site no longer exists. If the service is shut down, there’s nothing to log into, but if you reused that password elsewhere, change it on those other sites.

Frequently Asked Questions

Is it free to check if my info is on the dark web?

Yes, Have I Been Pwned is free, and Google’s Dark Web Report is free for Google account holders. Some password managers offer free monitoring tiers, but many require a paid subscription.

What should I do if my password appears in a breach?

Change that password immediately on any site where you used it. If you used it on multiple sites, change it on all of them. Also enable two-factor authentication on those accounts.

Can I remove my information from the dark web?

No, once data is on the dark web, it’s nearly impossible to remove. Your focus should be on minimizing the damage: change passwords, enable 2FA, and monitor your accounts.

Does the dark web monitoring check all of my personal data?

No, it only checks data that has been included in known breaches. It won’t catch everything, and it can’t see private forums or encrypted marketplaces. It’s a good tool, but not perfect.

How often should I check?

At least every few months, or whenever you hear about a major breach. Setting up alerts on Have I Been Pwned will notify you automatically.

What if I find my credit card number?

Contact your bank or card issuer immediately to cancel the card and request a new one. Also check your recent transactions for unauthorized charges.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.