Email check
Recommended action
Enter an email address to start.
Breached Email Checker FAQs
Does this check a live breach database?
No. This version gives safe breach-response guidance without sending the email address to a third-party database.
What is the first thing to do after a breach?
Change the password, enable MFA and check for suspicious mailbox rules or sign-ins.
Why check forwarding rules?
Attackers often add hidden forwarding rules to keep receiving emails after the password is changed.
Can MDS check Microsoft 365 compromise signs?
Yes. MDS can review sign-ins, MFA status, mailbox rules and recovery settings.