Head-to-head · Breach notification vs breach search
Have I Been Pwned vs DeHashed
HIBP tells you which breaches an email was in. DeHashed shows you the records. That is the whole difference, and it decides who should use which.
Have I Been Pwned is the free, trusted service that tells you whether an email or domain appeared in known breaches, with notifications and a widely used API. DeHashed is a searchable index of breach records that returns the data itself, including usernames, passwords, hashes, IPs, and names, for investigators and security teams. One is awareness; the other is evidence.
Pick Have I Been Pwned for free breach awareness and notifications. Pick DeHashed when you need the actual records to pivot from, and run it per lookup on SearchIn.
What each is best for
Have I Been Pwned vs DeHashed, side by side
Structural differences and access models. No invented list prices for either tool.
| Have I Been Pwned | DeHashed | |
|---|---|---|
| What you get back | Which breaches contained the identifier. | The records themselves, with fields. |
| Inputs | Email, domain, password hash. | Email, username, phone, domain, name, IP. |
| Audience | Everyone, including the public. | Investigators, security teams, researchers. |
| Access | Free web checks; paid API key for automation. | Subscription and API credits directly; per-lookup on SearchIn. |
| Monitoring | Notify-me and domain alerts. | Monitoring features depend on the subscription. |
Where OSINTverse fits
- DeHashed is on SearchIn with a published per-lookup price, beside LeakRadar, Snusbase, and LeakOSINTbot on the same identifier.
- Run HIBP first for free; run DeHashed and the other breach sources on SearchIn when you need the records.
- Every record pivots into a new lookup and stays in the Case.
More head-to-head comparisons
FAQ
Have I Been Pwned vs DeHashed, answered
Why not just use Have I Been Pwned?
For awareness, you should. For an investigation, knowing the breach name is not enough; you need the record to find the password reuse, the linked username, or the IP. That is DeHashed's job.
Can I run DeHashed without a DeHashed subscription?
Yes, on SearchIn, priced per lookup from your OSINTverse wallet with automatic refund on upstream failure.
Your first lookup is a minute away
Create a free account with a magic link and add credits when you're ready. Or try the live demo first, no account needed.
- Free account, no card
- Credits never expire
- Refund unused balance in 7 days