OSINTverse

Head-to-head · Breach notification vs breach search

Have I Been Pwned vs DeHashed

HIBP tells you which breaches an email was in. DeHashed shows you the records. That is the whole difference, and it decides who should use which.

Have I Been Pwned is the free, trusted service that tells you whether an email or domain appeared in known breaches, with notifications and a widely used API. DeHashed is a searchable index of breach records that returns the data itself, including usernames, passwords, hashes, IPs, and names, for investigators and security teams. One is awareness; the other is evidence.

Pick Have I Been Pwned for free breach awareness and notifications. Pick DeHashed when you need the actual records to pivot from, and run it per lookup on SearchIn.

What each is best for

OSINT platform
Have I Been Pwned
  • Free checks and alerts for individuals and domain owners
  • A trusted, widely integrated breach-name API
  • Password exposure checks via Pwned Passwords
On SearchIn
DeHashed
  • Seeing the breach records, not just the breach names
  • Searching by username, name, IP, phone, or domain as well as email
  • Pivoting from one record to the next identifier

Have I Been Pwned vs DeHashed, side by side

Structural differences and access models. No invented list prices for either tool.

Have I Been Pwned vs DeHashed comparison
 Have I Been PwnedDeHashed
What you get backWhich breaches contained the identifier.The records themselves, with fields.
InputsEmail, domain, password hash.Email, username, phone, domain, name, IP.
AudienceEveryone, including the public.Investigators, security teams, researchers.
AccessFree web checks; paid API key for automation.Subscription and API credits directly; per-lookup on SearchIn.
MonitoringNotify-me and domain alerts.Monitoring features depend on the subscription.

Where OSINTverse fits

  • DeHashed is on SearchIn with a published per-lookup price, beside LeakRadar, Snusbase, and LeakOSINTbot on the same identifier.
  • Run HIBP first for free; run DeHashed and the other breach sources on SearchIn when you need the records.
  • Every record pivots into a new lookup and stays in the Case.
Two breach indexes with overlapping but not identical coverage. The right answer for most investigations is both, and on SearchIn that is one click.

FAQ

Have I Been Pwned vs DeHashed, answered

Why not just use Have I Been Pwned?

For awareness, you should. For an investigation, knowing the breach name is not enough; you need the record to find the password reuse, the linked username, or the IP. That is DeHashed's job.

Can I run DeHashed without a DeHashed subscription?

Yes, on SearchIn, priced per lookup from your OSINTverse wallet with automatic refund on upstream failure.

Your first lookup is a minute away

Create a free account with a magic link and add credits when you're ready. Or try the live demo first, no account needed.

  • Free account, no card
  • Credits never expire
  • Refund unused balance in 7 days