Retrieving your API key
Have I Been Pwned issues one API key per subscription. You manage it from your HIBP dashboard, which you sign in to with the email address you used to purchase.
Sign in to Have I Been Pwned
Sign in to your Have I Been Pwned dashboard.
- Under Sign In with Email, enter the email address you used to purchase the subscription and click Sign In.
- HIBP sends a magic link to that address. Click it to sign in; no password is required.
- If a passkey is already associated with your dashboard, you can use Sign In with Passkey instead.
Open the API key page
In the dashboard, go to Business → API Key.
- Your key is displayed here and can be rotated at any time.
- No subscription yet? Buy one from the Have I Been Pwned API key page.
Copy the API key
Copy the key and paste it into the API Key field in StackOne Hub.
- Format: 32-character hexadecimal string
- Keep the key secure. It should never be exposed in client-side code or public repositories.
Verifying your domains
Domain search and stealer-log searches only return data for domains you have added and verified in your dashboard. Skip this section if you only search email addresses, breaches or passwords.
Add your domains
In the dashboard, go to Business → Domain Search and add the domains you want to monitor.
- Each domain must be independently verified before it can be searched.
Linking the Account from the Hub
Navigate to the Hub
Fill out the fields
- API Key
Connect
- Click Connect
- If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
- Once authorization is successful, you will see a confirmation popup
If the account linking is successful, you will see the newly linked account on your Accounts page.