# Have I Been Pwned API v3

**Canonical:** https://apis.io/apis/have-i-been-pwned/api-v3/  
**Provider:** Have I Been Pwned — https://apis.io/providers/have-i-been-pwned/  
**Base URL:** https://haveibeenpwned.com/api/v3  
**Documentation:** https://haveibeenpwned.com/API/v3

Have I Been Pwned API v3 is one of 16 APIs that [Have I Been Pwned](https://apis.io/providers/have-i-been-pwned/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Breaches, Pastes, Stealer Logs, Domain Search, and Account Search. The published artifact set on APIs.io includes API documentation, authentication docs, and pricing.

REST API for searching breached accounts, pastes, breach metadata, domain breach data, and stealer log entries. Authentication requires an hibp-api-key header (32-character key) along with a descriptive user-agent header. Most endpoints require a paid subscription; rate limits range from 600 to 100,000 requests per minute depending on tier.

## Machine-readable artifacts (4)

- **Documentation** — https://haveibeenpwned.com/API/v3
- **Authentication** — https://haveibeenpwned.com/API/Key
- **Pricing** — https://haveibeenpwned.com/API/Key
- **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/have-i-been-pwned/refs/heads/main/apis.yml

## Other Have I Been Pwned APIs (12)

- [Pwned Passwords API](https://apis.io/apis/have-i-been-pwned/pwned-passwords/)
- [Have I Been Pwned Breach API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-breach-api/)
- [Have I Been Pwned Breachedaccount API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-breachedaccount-api/)
- [Have I Been Pwned Breacheddomain API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-breacheddomain-api/)
- [Have I Been Pwned Breaches API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-breaches-api/)
- [Have I Been Pwned Dataclasses API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-dataclasses-api/)
- [Have I Been Pwned Domainverification API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-domainverification-api/)
- [Have I Been Pwned Latestbreach API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-latestbreach-api/)
- [Have I Been Pwned Pasteaccount API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-pasteaccount-api/)
- [Have I Been Pwned Range API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-range-api/)
- [Have I Been Pwned Stealerlogsbyemail API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-stealerlogsbyemail-api/)
- [Have I Been Pwned Stealerlogsbyemaildomain API](https://apis.io/apis/have-i-been-pwned/have-i-been-pwned-stealerlogsbyemaildomain-api/)

## Tags

Breaches, Pastes, Stealer Logs, Domain Search, Account Search

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/have-i-been-pwned/api-v3/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/have-i-been-pwned/.