Is HaveIBeenPwned API down?
Current status, daily uptime history and troubleshooting for the HaveIBeenPwned API (Security).
No, HaveIBeenPwned is up
HaveIBeenPwned answered our last daily check (Oct 24, 2026, 12:25 UTC) in 932 ms with HTTP 200.
Checking HaveIBeenPwned now…
Sending a request from our server.
HaveIBeenPwned API uptime history
- Uptime
- 2 checks so far
- Last check
- Oct 24, 2026, 12:25 UTC
- Response
- 932 ms · HTTP 200
- Last up
- Now
We check HaveIBeenPwned's listed URL (https://haveibeenpwned.com/API/v3) once a day. History started when HaveIBeenPwned was first checked, so new entries show fewer than 30 days.
HaveIBeenPwned API not working for you?
- HaveIBeenPwned needs an API key. A 401 or 403 usually means a missing, expired or mis-sent credential: check whether it belongs in a header or the query string.
- A 429 response means you're being rate-limited. Slow down, cache responses, and respect any Retry-After header.
- If calls fail only in the browser with a CORS error, HaveIBeenPwned may not allow cross-origin requests. Call it from your server instead.
- If it works from one network but not another, check firewalls, VPNs and regional blocks.
- Check the provider's documentation, status page or social accounts for planned maintenance or a changed endpoint.
Security APIs up at their last check
- 1
Presend API
Online · 399 msSecurity and developer utility API -- malware, vulnerability, and domain checks, no signup.
- No API key needed
- Fast: 399 ms response
- Callable from the browser (CORS)
- HTTPS
No authHTTPSCORS - 2
IPGuardian API
Online · 940 msCheck IP addresses against 140+ public threat intelligence blocklists.
- No API key needed
- Callable from the browser (CORS)
- HTTPS
No authHTTPSCORS - 3
IPLogs API
Online · 762 msFree VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing.
- No API key needed
- Callable from the browser (CORS)
- HTTPS
No authHTTPSCORS - 4
OSV API
Online · 608 msOpen source vulnerability database and distributed triage infrastructure.
- No API key needed
- Callable from the browser (CORS)
- HTTPS
No authHTTPSCORS - 5
Passwordinator API
Online · 730 msGenerate random passwords of varying complexities.
- No API key needed
- Callable from the browser (CORS)
- HTTPS
No authHTTPSCORS
Compare all HaveIBeenPwned alternatives · APIs down right now
HaveIBeenPwned API status FAQ
Is HaveIBeenPwned API down right now?
HaveIBeenPwned answered our last daily check (Oct 24, 2026, 12:25 UTC) in 932 ms with HTTP 200. This page also runs a live check from our server when you open it, so you can see whether HaveIBeenPwned is responding at this moment.
How do you check whether HaveIBeenPwned API is up?
Once a day our checker requests HaveIBeenPwned's listed URL (https://haveibeenpwned.com/API/v3) and records whether it answers within 15 seconds. Answers like 401 (needs a key), 403 (blocks bots) or 429 (rate-limited) count as up, because the server responded. The listed URL is often the documentation page, so an API endpoint can occasionally fail while its docs stay up.
What can I use if HaveIBeenPwned API is down?
Free Security APIs that were up at their last check include Presend, IPGuardian, IPLogs. See the full list of HaveIBeenPwned alternatives for a comparison.
Why does HaveIBeenPwned API work for others but not for me?
HaveIBeenPwned needs an API key. A 401 or 403 usually means a missing, expired or mis-sent credential: check whether it belongs in a header or the query string. A 429 response means you're being rate-limited. Slow down, cache responses, and respect any Retry-After header. If calls fail only in the browser with a CORS error, HaveIBeenPwned may not allow cross-origin requests. Call it from your server instead.