The Security Dashboard checks whether your email address or passwords have turned up in known data breaches, and whether an IP address has been reported for abuse. It's included with Premium VPN and Business VPN.
Open the Security Dashboard
- Sign in to the portal.
- In the sidebar, under Account, click Security.
If you're on Personal VPN, you won't see Security in the sidebar, and opening the page shows what's included with an upgrade. You can change plan under Billing › Upgrade plan.
What's on the page
Four cards at the top sum up your latest results: Email Breaches, Dark Web Pastes, Password Status and IP Reputation. Below them are the three checks.
Email Breach Check
The box is filled in with your account email, but you can check any address. Click Check to search known data breaches and paste sites, using Have I Been Pwned.
- For each breach you'll see its name, the date, how many accounts were affected, and what kind of data was exposed (for example passwords or phone numbers).
- If the email appears in pastes (data dumped on paste sites, often an early sign of a leak), you'll see the source and date.
You can run 3 email checks a day. The counter beside the heading shows how many you have left.
Password Exposure Check
Enter a password and click Check to see whether it has appeared in a known breach, and how many times.
How it works: the password is sent over an encrypted connection to our server, which turns it into a SHA-1 hash and sends only the first 5 characters of that hash to the Pwned Passwords service. That service returns every hash starting with those characters, and the match is done on our side. This is called k-anonymity: the breach service never sees your password or its full hash.
Password checks are unlimited.
IP Reputation Check
This checks IP addresses against AbuseIPDB and gives each one an abuse score from 0 to 100:
- 0: clean, no abuse reports
- 1 to 25: low
- 26 to 50: medium
- Over 50: high, reported for abuse
Each result also shows the ISP, country, type of connection (for example data centre or residential), the number of abuse reports, and whether the address is a Tor exit node.
To check a specific address, type it in Check custom IP and click Check. You can check 5 custom IPs a day.
Run a full scan
Click Run Full Scan at the top of the page to check everything in one go:
- your account email, for breaches and pastes (this uses one of your 3 daily email checks, and is skipped if you've used them all)
- your current IP address
- your dedicated IP addresses and dedicated server, if you have any
The IP checks in a full scan don't count towards your 5 custom IP checks.
The full scan checks the IP address of the device you're using right now. If you're connected to PremierVPN, that's the VPN server's address. Disconnect first if you want to check your home or office IP.
Daily limits
| Check | Limit |
|---|---|
| Email checks (including the one in a full scan) | 3 a day |
| Custom IP checks | 5 a day |
| Password checks | Unlimited |
Limits reset at midnight UTC. A check that fails because the service is unavailable doesn't use up your allowance.
FAQs
What should I do if my email is in a breach?
Change the password on that service, and anywhere else you used the same password. Turn on two-factor authentication where you can. A password manager makes it easy to use a different password everywhere.
What should I do if a password shows as exposed?
Stop using it. Change it on every account where you use it, starting with email, banking and anything that holds payment details.
Why does an IP address have a score above 0?
Scores come from reports other people make to AbuseIPDB. Data centre addresses, including VPN servers, can pick up the odd report from previous users or automated tools. A low score is common and isn't a sign that your connection is unsafe. If one of your dedicated IPs shows a medium or high score, open a support ticket and we'll look into it.