Checking whether your email appeared in a known data breach is free, and two well known tools do it well. Paid identity monitoring services cost money every month or year. So the honest question is not "where can I check my email?" but "is there anything worth paying for beyond the free check?"
This page compares the free options with paid monitoring, using OmniWatch as the paid example because its prices and terms are public. We have tried to be especially clear about what you can do for free, and about what a paid plan does and does not do.
The free options
Have I Been Pwned
Have I Been Pwned is the best known breach search. You type an email address and it lists the known breaches that address appears in, with the types of data each breach exposed. Its free Notify Me service emails you if your address appears in a future breach, and its Pwned Passwords feature checks whether a password has appeared in a breach. According to its FAQ, some breaches are classed as "sensitive" and are not shown in public searches; you only see those after you verify your address through Notify Me.
Mozilla Monitor
Mozilla Monitor, from the makers of Firefox, also checks your email against known breaches for free. Its How it works page says it searches all known data breaches using your email address, lets you monitor up to five email addresses for free, walks you through the steps to resolve each breach and alerts you to new breaches.
Google's dark web report (discontinued)
Google used to offer a free dark web report for Google accounts. Google discontinued it in 2026: scanning stopped in January 2026, and the report was shut down and its data deleted on February 16, 2026, as TechCrunch reported. Google now points people to its Security Checkup, its password manager and Password Checkup instead. If you relied on the dark web report, Have I Been Pwned or Mozilla Monitor are the closest free replacements for breach alerts.
Benefits you may already have
Some banks, credit card issuers, employers and insurance policies include credit or identity monitoring as a benefit, and the FTC mentions these as places people get such services. A company that had a breach involving your data may also offer free monitoring for a period. Check those before paying for anything.
Side by side
| Have I Been Pwned | Mozilla Monitor | Paid monitoring (OmniWatch Standard) | |
|---|---|---|---|
| Cost | Free | Free | $11.99/month or $95.88/year, renews automatically |
| Email breach search | Yes | Yes | Yes (dark web monitoring and breach notifications) |
| Alerts for new breaches | Yes (Notify Me) | Yes, up to 5 email addresses | Yes |
| Social Security number monitoring | No | No | Yes |
| Credit monitoring | No | No | 1 bureau (TransUnion); 3 bureaus on Elite and Family |
| Credit lock | No | No | TransUnion credit lock in the app |
| Identity theft recovery help | No | Guided self-help steps | 24/7 identity restoration specialists |
| Insurance | No | No | Identity theft insurance up to $2M, scam and ransomware reimbursement up to $50K; limits and exclusions apply |
| What you share | Email address | Email address (account for alerts) | Personal details and Social Security number, verified with TransUnion |
What paying actually adds
- Monitoring beyond your email. Free tools search breach data for your email address. Paid identity monitoring also watches your Social Security number and other personal details. The FTC says identity monitoring services may alert you when your information shows up in change of address requests, new utility or wireless service orders, payday loan applications or on sites where stolen information is traded.
- Credit monitoring. Alerts when a new account or credit inquiry appears on your credit report at the bureaus the plan covers. You can do this yourself for free by checking your weekly reports at AnnualCreditReport.com, but you have to remember to do it.
- Convenience tools. A credit lock you can switch on and off in an app, plus extras like antivirus, a VPN and scam detection for emails and texts, depending on the plan.
- Someone to call. Restoration specialists who help with the calls, letters and paperwork if your identity is misused. The FTC notes you can do much of this yourself for little or no cost through IdentityTheft.gov, but some people value the help.
- Insurance. Identity theft insurance can cover costs of recovering your identity. The FTC says such insurance generally covers out of pocket recovery expenses such as document costs, lost wages and legal fees, and generally will not reimburse money scammers stole. OmniWatch says its coverage includes reimbursement for fraudulent withdrawals from accounts and separate scam and ransomware reimbursement, subject to the restrictions in its insurance disclosure. Read the policy details before you count on them.
What no service can do
- No service can stop companies from being breached or remove your data from breaches that already happened.
- Monitoring tells you about problems after they start. A credit freeze, which is free, is the step that actually blocks new credit accounts.
- The FTC notes that credit monitoring will not alert you to bank withdrawals or to a tax return filed with your Social Security number, and most identity monitoring will not catch misuse of government benefits.
- No plan replaces strong unique passwords and two-factor authentication. See our password and two-factor guide.
How to decide
Free is probably enough if
You are comfortable freezing your credit at all three bureaus, you use a password manager and two-factor, you will actually check your free weekly credit reports, and you are happy to handle the paperwork yourself if something goes wrong.
Paid may be worth it if
Your Social Security number was exposed, you have been a victim before, you want one place that watches your SSN, credit and accounts, or you would rather have specialists and insurance in your corner than do the recovery work alone.
If you decide to pay, compare the monthly price, what happens at renewal, the refund window and how cancellation works. Our OmniWatch review lays out all of those for one option.
Sources and further reading
- Have I Been Pwned
- Have I Been Pwned: Notify Me
- Have I Been Pwned: FAQs
- Mozilla Monitor: How it works
- TechCrunch: Google's dark web report feature will no longer be available starting in February
- FTC Consumer Advice: What To Know About Identity Theft
- FTC Consumer Advice: Free Credit Reports
- OmniWatch: plans and pricing
- OmniWatch: Terms of Use and Conditions of Sale (sections 14 and 15)
- OmniWatch: insurance disclosure