Free OSINT tool
user-scanner online
Run user-scanner's thousands of per-site checks against a username or an email. It takes a minute or two; leave the tab open.
Runs user-scanner by kaifcodec (MIT). Not affiliated with the project.
How user-scanner works here
user-scanner is not a list but a module per site: each one knows that site's API or signup endpoint. Because of that it runs as the real Python tool, unmodified, in an isolated container we start when you search.
We run it with its safe defaults: no modules that could send the target a notification or password reset, no adult sites, no cross-scan, and no Hudson Rock call (which has its own page here).
How to read the results
- Found / Registered
- The site's own endpoint says the username is taken or the email has an account.
- Checked
- How many modules ran. Errors and skips are counted, not hidden.
- Extra
- Some modules return details such as a display name or follower count.
What this free check cannot tell you
- A full scan can take two minutes or more; checks that run longer are cut off.
- Modules break when sites change. Those count as errors, not as not found.
- Taken means someone holds that name, not that it is your subject.
When the free check is not enough
user-scanner says which accounts exist. SearchIn's identity and leak providers return what those accounts reveal.
What people use it for
- The widest single sweep for a handle or an email
- Email registration checks across hundreds of services
- Catching platforms the list-based tools miss
Run user-scanner on your own machine
For bulk runs, private networks, or the full feature set, install it yourself.
pip install user-scanner
user-scanner -u jane_doe # or -e jane@example.comOr let otinstaller manage it
One command installs user-scanner into its own virtualenv on Linux, and every run is saved with a timestamp and checksum. Free and open source.
pipx install otinstaller
ot install user-scanner
ot run user-scanner -- u:jane_doeOther free tools
FAQ
user-scanner, answered
Why does user-scanner take longer than Sherlock?
It runs thousands of modules, many of which talk to a site's real API in several steps. Sherlock makes one request per site. Expect a minute or two.
Does it send emails or password resets to the target?
No. user-scanner marks modules that could notify someone as loud and skips them unless you pass --allow-loud. We never pass it.
Is this the real user-scanner?
Yes. The published package runs unmodified in a container. We only read its JSON output and show it here.
Do you store what I search?
No. The username, email, phone, or domain you enter is sent in the request body, never in a URL, and it is not logged. Results are cached for a few hours under a one-way hash of the input so a repeat search is fast, then they expire.
Why is this free?
Because the first pass should cost nothing. These checks use open-source tools and free public data. When a result needs commercial data, such as people-search modules or breach records, SearchIn runs those as paid lookups with a receipt.
Your first lookup is a minute away
Create a free account with a magic link and add credits when you're ready. Or try the live demo first, no account needed.
- Free account, no card
- Credits never expire
- Refund unused balance in 7 days