Breach monitoring
Scan known data breaches for your email address, review what was exposed, and follow guided steps to secure affected accounts.
Breach Monitoring checks whether your email address appears in known data breaches, using the Have I Been Pwned (HIBP) breach database. Together with the breached-password checks in Password health, it tells you when a credential you rely on has been exposed.
Premium Breach Monitoring is available on Premium and every plan above it, including Solo Professional. On a Free plan the sidebar item is labelled PREMIUM and opens an upgrade page; members of an organization whose plan does not include it do not see the item.
Run a scan#
- Open Breach Monitoring in the My security sidebar (My security on some plans).
- Choose Scan Now. PulsVault checks the email address of your signed-in account against known breaches. The check always uses your own account email — it cannot be pointed at another address.
- Review the results — previous scans are saved, so results are waiting when you return.
Read a breach report#
Each breach appears as a card showing:
- Breach name and date — which service was breached and when.
- Status — Action Required, or Resolved with the date once you have marked it fixed.
- Compromised Data — what leaked (for example emails, passwords, names).
- A short description of the incident.
Results are paged. With nothing to show, the page reads No Breaches Found.
Respond to a breach#
Choose Fix Issue on a breach card. A short guide opens with three steps. PulsVault does not change anything on the affected service for you:
- Change your password on that service. When the breach record names the service's website, a link to it is shown.
- Update it in PulsVault if you saved it there. Find it in my vault (shown when the website is known) opens your items searched by that site.
- Change it anywhere you reused it.
To find every item that shares a password, run a Password health scan, then use Update on each row — or change it from the item itself.
When you have done this, choose I've changed it. The card becomes Resolved with the date, and the breach is removed from My security score and from the email-breach recommendation. Resolved breaches stay in the list, below the unresolved ones, and the page header shows how many are still unresolved.
Reopen a breach#
Choose Reopen on a resolved card to put it back: it counts against your score again. A new scan keeps your resolutions — a breach you marked as fixed stays resolved when it appears in the next scan, and only a breach that is new to your account needs action.
PulsVault cannot see whether you changed the password on the other service, so I've changed it takes your word for it. Both marking a breach resolved and reopening it are recorded in your activity log.
How password breach checks stay private#
Password exposure is checked from the Password Health scan using k-anonymity: your password is hashed on your device and only the first 5 characters of the hash are sent to the HIBP range API. The matching happens locally, so neither the password nor its full hash ever leaves your browser.
Checking an email address against the breach database requires sending that address to the HIBP service. PulsVault proxies this request through its servers; no vault contents are involved — only the email address you signed up with.
A result here means a third-party service leaked data associated with your email. The secrets in your vaults remain encrypted end-to-end — see the zero-knowledge model.
Related#
- Password health — find breached, weak, and reused passwords across your vaults.
- The My security overview shows your latest breach status at a glance.