pwnedOrNot
Operator: Lohitya Pushkar (thewhiteh4t) and contributors
A local Python program for data breach information from Have I Been Pwned and searches of linked pastes.
Leaks, Breaches & Infostealers
Product
pwnedOrNot, a locally run Python command-line program. It uses external HIBP APIs and linked pastes, rather than its own data breach database.
Availability and source date
Active
As of: 16 October 2026.
No functionality test has been performed.
Use in OSINT research
Queries Have I Been Pwned for data breach information about email addresses. The additional search of linked pastes depends on their availability and does not guarantee results.
Queries
| Input | Result | Result type |
|---|---|---|
| Email address | According to the project guide: data breach names, affected domains, event dates, exposed data types and HIBP status details. Optional searches of linked pastes that are still reachable. | Retrieved |
| Domain / website | Metadata about data breaches involving the specified website domain. | Retrieved |
Features
- Queries HIBP v3 for data breach information about individual email addresses.
- Processes files containing multiple email addresses.
- Filters data breach information by the domain of the affected service.
- Shows information about a named data breach or a list of affected website domains.
- Optionally searches pastes linked by HIBP for lines matching the email address.
- Optionally saves affected email addresses in a text file.
Categories
- Leaks, Breaches & Infostealers
- Breach search
- Pastes
Coverage
Dataset
No dataset of its own. Data breach metadata comes from HIBP; the additional search uses pastes linked there.
Access
Installation and deployment
Locally installable
A Python command-line program on your own computer or in Docker. Data comes from external HIBP services and linked paste sites.
Requirements
A local Python 3 installation with requests and html2text, or Docker. Email and paste queries require a paid HIBP API key.
Export
Terminal output; the --save option writes affected email addresses to a text file, not a full data breach report.
Provider
Lohitya Pushkar (thewhiteh4t) and contributors
Country of establishment
Unknown
Interfaces
No API, MCP or AI integration is documented.
Maintenance
Licence
MIT
Latest activity
Commit 03/2026
Stars
approx. 2,700 (as of 16 October 2026)
Legal note
Limitations
- The software is free, but email and paste queries require a paid HIBP key.
- Paste searches depend on sources that are still reachable.
- The changelog ends in 2021; the current source code was changed in March 2026.
Guides and practical reports
Official · pwnedOrNot: installation and use
Lohitya Pushkar · EN
Describes local installation, email lists, domain filters and the HIBP key.