Troy Hunt

Founder & CEO of Have I Been Pwned (npub1rqs…83hv), the most trusted name in data breach intelligence. Speaker, blogger, Microsoft Regional Director. Gold Coast, Australia.

Blog: https://www.troyhunt.com

Last Notes

2026-04-17 01:09:50 CEST

I've spoken a bunch recently about experiments with agentic AI to do genuinely useful stuff, such as "Bruce", who now replies to most of our Zendesk tickets. So, what happens when you let it loose on the HIBP API? Some pretty cool stuff: https://www.troyhunt.com/heres-what-agentic-ai-can-do-with-have-i-been-pwneds-apis/

2026-03-30 20:43:42 CEST

Today, after many months of hard work, we're launching a bunch of new @npub1rqs…83hv features that improve privacy, usability and performance. We're a little team, but we've done a lot since this pic in November. Here are all the details: https://www.troyhunt.com/passkeys-k-anonymity-searches-massive-speed-enhancements-bulk-domain-verification-api/

2026-01-13 12:42:15 CET

Occasionally, someone takes issue with me flagging a data breach as "sensitive" such that the email addresses can't be publicly searched because they want to dox the users. That's a *really* bad idea, for many reasons: https://www.troyhunt.com/who-decides-who-doesnt-deserve-privacy/

2025-12-04 00:38:23 CET

I've had this dumb report too many times, and Bruce has finally tipped me over the edge. @npub1rqs…83hv is a real service that looks up email addresses in actual data breaches, but some people don't understand what an email address actually is https://www.troyhunt.com/why-does-have-i-been-pwned-contain-fake-email-addresses/

2025-12-03 21:03:16 CET

Happy birthday @npub1rqs…83hv! 12 years ago today, I pushed out a blog post launching a little data breach search tool, and life changed forever. Reading the post again now, did I get it right? 😎 https://www.troyhunt.com/introducing-have-i-been-pwned/

2025-11-06 06:08:45 CET

This has been an extraordinary set of data to process: 1.3B unique passwords, 2B unique email addresses (including mine 😭) and almost 3M of our @npub1rqs…83hv subscribers in there. It’s been weeks of processing to get this loaded, and finally, it’s done https://www.troyhunt.com/2-billion-email-addresses-were-exposed-and-we-indexed-them-all-in-have-i-been-pwned/

2025-07-19 01:11:05 CEST

Can you believe it’s ten years to the day since the Ashley Madison data breach hit the news?! It’s still arguably the most impactful, most widely publicised data breach in history. https://krebsonsecurity.com/2015/07/online-cheating-site-ashleymadison-hacked/?ref=troyhunt.com

2025-05-19 22:20:05 CEST

After a gargantuan effort, the all-new @npub1rqs…83hv brand and website is now officially live! https://www.troyhunt.com/have-i-been-pwned-2-0-is-now-live/

2025-04-10 14:15:30 CEST

I'm looking for some contacts at companies that provide identity protection services, any followers out there? Further, have you had good experiences with any specific companies? There are some product placement opportunities we're exploring in the updated @npub1rqs…83hv site.

2025-03-29 12:41:09 CET

I'm writing up a blog post called "Passkeys for Normal People", which is a non-trivial exercise. For example, whilst LinkedIn "supports" passkeys, it doesn't seem to allow using them as a second factor *or* a sole factor, so you're still left with passwords and OTPs. Correct?

2025-03-25 08:36:18 CET

It finally happened - I got phished. Impact is limited to the Mailchimp mailing list for my blog, brief blog post with details here and more to come later: https://www.troyhunt.com/a-sneaky-phish-just-grabbed-my-mailchimp-mailing-list/

2025-03-17 08:30:24 CET

I'm speaking at the University of Oxford next week (yes, the UK one), as part of their Programme for Cyber and Technology Policy. It's a free event, come along if you're over that way: https://www.bsg.ox.ac.uk/events/lessons-billions-data-breaches

2025-01-27 23:35:31 CET

This is such cool analysis of PIN in @npub1rqs…83hv's Pwned Passwords. Scroll through the page and watch the heat map change alongside the explanations of how people are creating (somewhat) predictable PINs: https://www.abc.net.au/news/2025-01-28/almost-one-in-ten-people-use-the-same-four-digit-pin/103946842

2025-01-23 04:15:38 CET

Yesterday, someone tried to sell an alleged data breach of JB Hi-Fi. The breach was a hoax, and it was dead simple to prove 😊 https://www.troyhunt.com/you-cant-trust-hackers-and-other-data-breach-verification-tales/

2024-12-06 14:42:38 CET

A few years ago, I wrote a book. It was the culmination of my most important posts and the stories behind them. Writing this book also helped keep me sane during insane times, and as of today, I'm giving it away for free 😊 https://www.troyhunt.com/pwned-the-book-is-now-available-for-free/