Firefox to Get New Security Tool With 'Have I Been Pwned' Email Database Integration - MacRumors
Skip to Content

Firefox to Get New Security Tool With 'Have I Been Pwned' Email Database Integration

by

firefoxlogoMozilla has announced a new security tool for users of its Firefox web browser. Called Firefox Monitor, the website lets visitors check if their accounts have been included in known data breaches and the types of data exposed in each breach.

The security tool is the result of a partnership between Mozilla and HaveIBeenPwned.com (HIBP), a site set up by security researcher Troy Hunt that includes a database of email addresses that are known to have been compromised in data breaches.

Thanks to the partnership, Firefox is able to check email addresses against the HIBP database via a method of anonymized data sharing (full details can be found in Troy Hunt's blog post). The new tool builds on Firefox's existing HIBP integration, which tells users if a site they are visiting was previously exposed in a data breach.

Firefox Monitor Homepage2
In February, password management app 1Password announced its own partnership with HIBP, which lets users check that their passwords haven't been leaked online. Since that time, developers AgileBits have built the Pwned Passwords database list into its 1Password desktop apps. As of today, users can also search HIBP from directly within 1Password via the Watchtower feature in the web version of the product.

Mozilla says it will begin trialling the new integration between HIBP and Firefox to make breach data searchable over the coming weeks.

Firefox Quantum is available for macOS as a free download directly from the Mozilla website.

Top Rated Comments

103 months ago
I used to like the old pre-Firefox, “Mozilla” browser. Remember that?
I'm fine with speed improvements in FF58+ I
If they are creating a hash of my email it can be reversed engineered back to my email. No thanks.
I recommend you to read something about hashes.
Score: 4 Votes (Like | Disagree)
bLackjackj Avatar
103 months ago
If they are creating a hash of my email it can be reversed engineered back to my email. No thanks.
No it can't,..I don't know where you are making up this information from, but it's wrong.
Score: 4 Votes (Like | Disagree)
103 months ago
If they are creating a hash of my email it can be reversed engineered back to my email. No thanks.
Firefox will not only hash your email with SHA-1, it will send only the first 6 characters of that hash to HIBP. That amount of data is useless to try to recreate your email.
Score: 1 Votes (Like | Disagree)
103 months ago
Your e-mail could be brute-forced from the hash -- but it cannot be reversed.

Eg, the service could say "I have a hash abf112bacd3489... is this hash equal to a@gmail.com? No? How about b@gmail.com? No?"

However, nobody... NOBODY is going to take the time to brute-force each individual email/hash. It would take way too much time and effort.
Score: 1 Votes (Like | Disagree)
103 months ago
If they are creating a hash of my email it can be reversed engineered back to my email. No thanks.
That is impossible
Score: 1 Votes (Like | Disagree)
103 months ago
I'm assuming you can opt out of this "feature" where they send your email to this third party?
Did you read the full article? It says Mozilla uses “anonymized data sharing” so your email address won’t be revealed to third parties!
Score: 1 Votes (Like | Disagree)

Popular Stories

Apple Event Logo

Apple's Next Era Begins September 1

Thursday May 7, 2026 10:36 am PDT by
Apple recently announced that Tim Cook will be stepping down as CEO later this year, after 15 years of leading the company. Effective September 1, Apple's hardware engineering chief John Ternus will become the company's next CEO, while Cook will become executive chairman of Apple's board of directors. In his new role, Apple said Cook will assist with "certain aspects" of the company,...
Four iPhone 18 Pro Colors Mock Feature

iPhone 18 Pro Launching in September With These 10 New Features

Saturday May 9, 2026 6:03 am PDT by
While the iPhone 18 Pro and iPhone 18 Pro Max are not launching until September, there are already plenty of rumors about the devices. It was initially reported that the iPhone 18 Pro models would have fully under-screen Face ID, with only a front camera visible in the top-left corner of the screen. However, the latest rumors indicate that only one Face ID component will be moved under the...
General Apps Reddit Feature

Reddit Starts Blocking Mobile Website, Pushing Users to App Instead

Monday May 11, 2026 6:10 am PDT by
Social network Reddit recently began blocking mobile visitors to its website while pushing them to download the official Reddit app, and it's fair to say that the move is not going down well with users. If you visit reddit.com on your iPhone today, you may see a new popup that can't be dismissed, asking you to "get the app to keep using Reddit." A Reddit spokesperson told Ars Technica...