Domain verification proves to HIBP that you control the domain before allowing you to search its breach data. Each domain must be verified individually — verifying a root domain does not cover its subdomains.
To add and verify a domain:
1. Sign in to your dashboard at haveibeenpwned.com/Dashboard
2. Navigate to Business → Domain Search → Add domain
3. Enter the domain and choose a verification method
Four verification methods are available:
- DNS TXT record — Add a TXT record to your domain's DNS with the value provided. Verification is automatic once the record propagates (usually within minutes, but can take up to 48 hours depending on your DNS provider).
- Meta tag — Add an HTML <meta> tag to the <head> of your domain's homepage.
- HTML file — Upload a small HTML file to a specific path on your web server.
- Email to admin address — Receive a verification link at a standard admin address on the domain (e.g. admin@, webmaster@, postmaster@).
Choose whichever method is most convenient for your setup. Once verified, the domain will appear in your dashboard, and you can begin searching and monitoring it for breaches.