Is your email
already out there?

A breach is only dangerous if the password was reused somewhere important. HIBP tells you an account was compromised. It tells you nothing about whether that same credential — or a variation of it — is still active on your banking platform, your brokerage, your work email, or your household's primary Apple ID. Password-reuse mapping requires access to your actual vault, not a public database query.

Your email may be clean. Your spouse's secondary email — the one connected to your joint brokerage and their Amazon account — may not be. Your children's accounts are registered under emails you've never checked. Family members are the most common lateral-access path in household credential attacks. The Sentinel risk report covers the full household, not just the address you typed in the box. See how we cover your family →

Your Nest, Ring, and Sonos accounts are registered to personal emails and secured with whatever password you chose in 2020. They're not in HIBP. But the credentials protecting live camera feeds and front-door access are on the same email infrastructure as everything else in this scan — and they've never been audited. Device credential exposure doesn't surface in breach databases. It surfaces when someone accesses your front door camera at 2am. See smart home coverage →

If you hold crypto, your exchange account emails, KYC documents, and transaction history have been exposed through exchange breaches that HIBP may not have fully indexed. More critically, the metadata linking your wallet addresses to your identity — leaked through exchanges, tax software, and portfolio trackers — is not a breach database problem. It's an operational security problem that requires a custody architecture review, not a scan. See crypto security coverage →