> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackone.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect Have I Been Pwned with API Key – StackOne Hub

> Link a Have I Been Pwned account in the StackOne Hub using API Key. End-user guide to authorize the integration and start using Have I Been Pwned actions.

> [!WARNING]
>
> The API key requires a paid Have I Been Pwned subscription. Your plan (Core, Pro or High RPM) sets the rate limit and which searches the key can run; stealer-log and domain-verification searches need Pro.

## Retrieving your API key

Have I Been Pwned issues one API key per subscription. You manage it from your HIBP dashboard, which you sign in to with the email address you used to purchase.

**1. Sign in to Have I Been Pwned**

Sign in to your [Have I Been Pwned dashboard](https://haveibeenpwned.com/Dashboard).

<ul>
  <li>Under **Sign In with Email**, enter the email address you used to purchase the subscription and click **Sign In**.</li>
  <li>HIBP sends a magic link to that address. Click it to sign in; no password is required.</li>
  <li>If a passkey is already associated with your dashboard, you can use **Sign In with Passkey** instead.</li>
</ul>

**2. Open the API key page**

In the dashboard, go to **Business → API Key**.

<ul>
  <li>Your key is displayed here and can be rotated at any time.</li>
  <li>No subscription yet? Buy one from the [Have I Been Pwned API key page](https://haveibeenpwned.com/API/Key).</li>
</ul>

**3. Copy the API key**

Copy the key and paste it into the **API Key** field in StackOne Hub.

<ul>
  <li>Format: 32-character hexadecimal string</li>
  <li>Keep the key secure. It should never be exposed in client-side code or public repositories.</li>
</ul>

## Verifying your domains

Domain search and stealer-log searches only return data for domains you have added and verified in your dashboard. Skip this section if you only search email addresses, breaches or passwords.

**1. Add your domains**

In the dashboard, go to **Business → Domain Search** and add the domains you want to monitor.

<ul>
  <li>Each domain must be independently verified before it can be searched.</li>
</ul>

## Linking the Account from the Hub

**1. Navigate to the Hub**

Use one of the three [Linking Account Methods](https://docs.stackone.com/connect/managing-connectors/linking-accounts.md) to access the Hub.

**2. Fill out the fields**

Fill out the following fields using details from your provider:

<ul>
  <li>**API Key**</li>
</ul>

**3. Connect**

<ul>
  <li>Click **Connect**</li>
  <li>If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider's authorization flow.</li>
  <li>Once authorization is successful, you will see a confirmation popup</li>
</ul>

If the account linking is successful, you will see the newly linked account on your [Accounts](https://app.stackone.com/accounts) page.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.