Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Have I Been Pwned Breachedaccount API

The Breachedaccount API from Have I Been Pwned — 2 operation(s) for breachedaccount.

Have I Been Pwned Breachedaccount API is one of 16 APIs that Have I Been Pwned publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Breachedaccount. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 2 operations across 2 paths, and defines 4 schemas. It is described by OpenAPI 3.0.3, at version 3.0.0.

Requests are made against 2 base URLs: https://haveibeenpwned.com/api/v3, https://api.pwnedpasswords.com.

2 operations 2 paths 4 schemas 2 GET

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.3
API Version
3.0.0
Base URL
https://haveibeenpwned.com/api/v3
Authentication
API Key
Resource Areas
1

Authentication & Security 1

Have I Been Pwned Breachedaccount API declares 1 security scheme for authenticating requests. An API key is passed in the header as hibp-api-key (HibpApiKey).

  • HibpApiKey — HIBP API key passed in the hibp-api-key header. Paid APIs require a 32-character hexadecimal value. On supported test-only endpoints, any 32-character hexadeci…

Paths & Operations 2

Across 2 paths, the API surfaces 2 operations — 2 GET. Each is listed below with its method, path, parameters, and response codes.

Breachedaccount 2
GET
/breachedaccount/{account}
Get all breaches for an account
5 params → 200400401403404429503
GET
/breachedaccount/range/{prefix}
Get all breached account hashes for a range
2 params → 200400401403404429503

Schemas 4

The contract defines 4 schemas that model the data the API accepts and returns. The most detailed are Breach (19 properties), Error (2 properties), BreachedAccountRangeResult (2 properties), TruncatedBreach (1 property). Each schema is shown below with its type and property counts.

Breach
object
19 properties 18 required
BreachedAccountRangeResult
object
2 properties 2 required
TruncatedBreach
object
1 property 1 required
Error
object
Standard error response returned by most authenticated HIBP APIs.
2 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

have-i-been-pwned-breachedaccount-api-openapi.yml Raw ↑

Other APIs Have I Been Pwned publishes across the network.

Have I Been Pwned API v3
Pwned Passwords API
Have I Been Pwned Breach API
Have I Been Pwned Breacheddomain API
Have I Been Pwned Breaches API
Have I Been Pwned Dataclasses API
Have I Been Pwned Domainverification API
Have I Been Pwned Latestbreach API
Have I Been Pwned Pasteaccount API
Have I Been Pwned Range API
Have I Been Pwned Stealerlogsbyemail API
Have I Been Pwned Stealerlogsbyemaildomain API