Have I Been Pwned unveils major redesign with confetti celebration and unified dashboard
May 21, 2025 at 7:50 AM

Have I Been Pwned unveils major redesign with confetti celebration and unified dashboard

Have I Been Pwned, the well-known breach notification service, has unveiled a comprehensive website redesign. The updated interface still highlights a prominent search box for users to check if their email addresses have appeared in a data breach, but after entering an email address, the response experience now shifts: when no breaches are found, users are greeted by a celebratory confetti animation. 🎊

If an email address is associated with a breach, Have I Been Pwned will show a red alert, as well as a reverse chronological timeline summarizing each breach affecting that email address. Additionally, a new breach detail page has been added, providing both context and specific advice, such as prompting users to update credentials, enable two-factor authentication, or use a password manager.

Building on the user experience updates, the new site also introduces a unified dashboard, consolidating all major features for easier access. However, with this update, username and phone number searches have been discontinued on the website for maintainability reasons, though they stay available via the API.

Additionally, the domain search tool has received upgrades with improved filters, streamlined verified domain lists, and improved summaries. Ownership verification has also been refined, supporting more targeted domain breach checks.

May 21, 2025 by Paul

cz
Em
shazmatazbraky
city_zen found this interesting
  • ...

Have I been pwned? is a data breach repository that allows users to check if their email addresses have been compromised in security breaches. Rated 4.4, it offers features like email security, domain monitoring, and data leak prevention. Top alternatives include Mozilla Monitor, Intelligence X, and DeHashed.

Comments

UserPower
May 21, 2025
1

Great to see improvements even if most of work is done behind the curtains by Troy aggregating breaches and credentials to offering a comprehensive tool, since most companies are reluctant to publish much details when breached. It's also a reminder that we all need to use unique long random gibberish passwords for each website, and report to websites that don't accept anything but 6 digits generated password (like some banks), since 2FA is no panacea, nor passkeys.

Gu