Have I Been Pwned: check if your accounts are in a breach

Have I Been Pwned does one thing well. You type in your email address, and it tells you every known data breach that address has turned up in, often going back a decade.

It is run by security researcher Troy Hunt, it is free, and it has become the standard reference for breach data. When a big incident like the Notion breach hits, it is the fastest way to find out whether your accounts are among the exposed and, more usefully, which ones to secure first.

Who it is for

Anyone with more than a handful of online accounts, which is everyone. It is especially worth it if you have ever reused a password, because the tool shows you exactly which breaches your address appears in so you can go and change those logins. Skip it only if you genuinely enjoy nasty surprises.

Pair it with a password manager and you have covered most of the basics. For the full checklist after a breach, see our guide to the Notion incident.