Free OSINT tool
Holehe online
Find out which of 100+ sites an email address is registered on, using Holehe's own modules.
Runs Holehe by megadose (palenath) (GPL-3.0). Not affiliated with the project.
How Holehe works here
Each Holehe module talks to one site's signup or login flow and reads whether it says the email is already in use. The flows need cookies and tokens, so Holehe runs as the real Python tool, unmodified, in an isolated container.
Modules that work through password recovery (Adobe, Mail.ru, Odnoklassniki, Samsung) are switched off, the same as Holehe's --no-password-recovery flag, so a lookup never starts a recovery flow on someone else's account.
Where a site shows them, Holehe returns partly hidden recovery emails or phone numbers, such as j***@gmail.com. Those come back as the site shows them.
How to read the results
- Registered
- The site said this email already has an account.
- Not registered
- The site said the email is free to use.
- Rate limited
- The site refused to answer. Not the same as not registered.
- Recovery hints
- Partly hidden emails or phone numbers a site shows during login.
What this free check cannot tell you
- Holehe has not had a release since 2024, and some modules no longer work. Those return errors or rate limits, which are shown, not hidden.
- A registered email shows an account exists, not when it was made or what is in it.
- Sites rate-limit shared servers, so a busy hour may show more rate limits than a run from your own machine.
When the free check is not enough
Holehe tells you where an email has accounts. SearchIn's identity providers return the profiles behind them, and its leak providers show where the address appears in breaches.
What people use it for
- Tie an email to the services it uses before a deeper search
- Check whether a work address was used to sign up for personal services
- Spot recovery phone or email hints that point to another identity
Run Holehe on your own machine
For bulk runs, private networks, or the full feature set, install it yourself.
pip3 install holehe
holehe jane@example.com --only-usedOr let otinstaller manage it
One command installs Holehe into its own virtualenv on Linux, and every run is saved with a timestamp and checksum. Free and open source.
pipx install otinstaller
ot install holehe
ot run holehe -- e:jane@example.comGet otinstallerOther free tools
FAQ
Holehe, answered
Does Holehe alert the person whose email I check?
Holehe is designed not to. Its checks use signup and login screens rather than sending messages. The modules that work through password recovery, the ones that could, are switched off here.
Why are so many sites rate limited?
Sites limit how often one server can ask. Shared servers hit those limits sooner than a home connection. Try again later, or run Holehe locally for the sites that matter most.
Is Holehe still maintained?
The last release was in 2024. It still works for many sites, but expect some modules to fail. user-scanner and Blackbird's email check are newer options that cover some of the same ground.
Do you store what I search?
No. The username, email, phone, or domain you enter is sent in the request body, never in a URL, and it is not logged. Results are cached for a few hours under a one-way hash of the input so a repeat search is fast, then they expire.
Why is this free?
Because the first pass should cost nothing. These checks use open-source tools and free public data. When a result needs commercial data, such as people-search modules or breach records, SearchIn runs those as paid lookups with a receipt.
Your first lookup is a minute away
Create a free account with a magic link and add credits when you're ready. Or try the live demo first, no account needed.
- Free account, no card
- Credits never expire
- Refund unused balance in 7 days