Holehe
Check if an email address is registered on websites and services without sending any emails.
External Tool
This open-source tool is maintained externally. View the source on GitHub to learn more or run it yourself.
Browse security tools →What's next with Holehe?
Choose how you want to get started.
Use it free
Open the official tool or demo — no account needed.
Self-host it
Run the open-source version on your own infrastructure.
What is Holehe?
Holehe is an open-source OSINT (Open-Source Intelligence) tool designed to identify registered accounts associated with a given email address across multiple platforms. Its primary purpose is to help users determine if an email has been used to create accounts on websites like Twitter, Instagram, Imgur, and over 120 other services. This tool is particularly useful for security researchers, digital forensics analysts, and cybersecurity professionals who need to assess potential data breaches or track digital footprints. Holehe solves the problem of manually checking an email's presence on numerous platforms by automating the process and consolidating results into a single report. The online version of Holehe allows users to input an email address and receive real-time information about its registration status across 200+ sites, without accessing private data or passwords. It operates by querying public registration databases and forgotten password functions, making it a non-intrusive method for email reconnaissance.
How it works
Holehe is an open-source OSINT tool that leverages public data to check if an email address is associated with registered accounts on various platforms. It is hosted on GitHub under the GPL-3.0 license and has gained significant traction with over 7,300 stars. The tool's purpose is to streamline the process of identifying email usage across multiple websites, which is critical in scenarios like breach investigations or account verification. The tool operates by querying public registration databases and forgotten password functions of websites. It does not scrape private content or retrieve passwords, focusing instead on confirming whether an email exists in a site's user database. This makes it a valuable resource for users who need to assess the security posture of an email address without violating privacy boundaries. Holehe can check email registrations on platforms such as Twitter, Instagram, Imgur, and over 120 other services. It provides a consolidated report listing all sites where the email is registered, along with details like account creation dates and potential password recovery options. The online version of the tool allows users to input an email address and receive a real-time report across 200+ sites, eliminating the need for manual checks.
How to use it
- 1Open the Holehe page
- 2Use the tool directly in your browser
- 3Results appear instantly — no waiting, no downloads
What it can do
- email to account correlation
Use cases
Assumptions and limitations
Assumptions
- source: https://github.com/megadose/holehe
- license: GPL-3.0 — free to use
- privacy: Self-hosted — you control your data
Limitations
- Dual-use tool — use only with explicit authorization on systems you own or have permission to test.
- Relies on public registration data, which may not include all platforms or private accounts.
- Does not support password recovery or scraping of private user content.
- May miss newer or less popular websites not indexed in its database.
- Results are limited to confirmed registered accounts, not speculative or unverified data.
Understanding the result
Check if an email address is registered on websites and services without sending any emails.
Tool details
- Clearly flagged when a network request is needed.
- No account, no sign-up, and no tracking of your content.
- Powered by (GPL-3.0).
- Built with
- (megadose/holehe)
- License
- GPL-3.0
- Runs locally
- No — requires a network request
- Verification
- Not yet verified
- Input
- Query
- Output
- Text
Built with megadose/holehe. OpenToolVault provides the discovery and browser interface while crediting the original project maintainers.
- Built with
- License
- GPL-3.0
Open-source project
OpenToolVault is an independent directory. We are not affiliated with or endorsed by this project.
References
- / — GitHub Repository
Upstream project · GitHub
- GPL-3.0 License
Upstream project
Frequently asked
How does Holehe gather information about email registrations?
Holehe queries public registration databases and forgotten password functions of websites. It does not scrape private content or access passwords. Instead, it checks if an email exists in a site's user database by leveraging APIs or public endpoints that confirm account existence. This method ensures compliance with privacy standards while providing actionable intelligence.
How does the online version of Holehe differ from the local tool?
The online version of Holehe is a web-based interface that abstracts the underlying code, allowing users to input an email and receive results without installing software. The local tool, hosted on GitHub, requires Python and dependencies to run, offering more customization for advanced users. Both versions use the same core logic but differ in accessibility and setup requirements.
How can I check if an email is registered on multiple platforms?
Visit the Holehe online tool at https://osint.industries/, enter the email address, and submit the query. The tool will scan over 200 platforms and generate a report listing all sites where the email is registered. For example, if the email is linked to Twitter and Instagram, the report will display both platforms with relevant details like account creation dates.
How does Holehe compare to alternatives like Hunter.io or Clearbit?
Holehe focuses on confirming email registrations across platforms without retrieving private data, whereas Hunter.io and Clearbit provide additional features like email validation and contact lookup. Holehe is open-source and free, while alternatives may offer premium services. Holehe's strength lies in its OSINT capabilities for security research, while Hunter.io and Clearbit cater to email verification and outreach.
What should I do if Holehe returns no results for an email?
If Holehe returns no results, the email may not be registered on any of the platforms it checks, or the database may not include the specific site. Verify the email's accuracy, try a different email, or check if the site is supported. If the site is not listed, consider using the local version of Holehe to expand the database or report the missing platform for inclusion.