SaaSSecurity

Password Reset

Trigger targeted password resets when a breach relevant to your users becomes public.

Start with 500 free creditsDocumentation

Email breaches · 1 credit per lookup · no monthly fee

Breach affects 3 users
Password resets sent

The problem

A breach goes public and some slice of your users had accounts there, with the same password they use on your platform. Waiting for them to be compromised before acting is a policy, just not a good one.

With Encrata

Sweep your user base against the new breach, identify who's affected, and trigger targeted resets for exactly those accounts. Precision matters: forced resets for everyone train users to ignore security emails, while targeted ones with the breach named get acted on.

How it works

1

Send the address

Call the breach endpoint with an email address, one-off for a signup check, or on a schedule for monitoring.

2

We check known breaches

Encrata searches disclosed breach data and returns every breach the address appears in, when it happened, and what leaked.

3

Respond to exposure

Alert the user, raise a risk score, force a reset or require MFA, the full breach history is one credit away.

One call, structured answer

Password Reset runs on the email breaches lookup at 1 credit per lookup. Same API key, same JSON shape as every other Encrata lookup.

  • Full breach history, names, dates and exposed data classes per breach
  • 1 credit per check, so continuous monitoring stays affordable
  • New-breach detection turns a public leak into a same-day security response
  • Works for one address or your whole domain
Terminal
curl -X POST "https://encrata.com/api/agent/breaches" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "sam@corp.com"}'
response.json
{
  "email": "sam@corp.com",
  "breached": true,
  "breach_info": {
    "breach_count": 2,
    "services": [
      { "name": "LinkedIn", "breach_date": "2012-05-05",
        "data_types": ["Email addresses", "Passwords"] }
    ],
    "exposed_data": ["Email addresses", "Passwords"]
  },
  "credits": 1
}

Sweep, segment, reset

When a major breach drops, sweep your user base against it, segment the affected accounts, and trigger resets for exactly that segment. Name the breach in the reset email, 'your email appeared in the DataCo breach' converts far better than generic security nagging, because it's specific and checkable.

Precision preserves trust

Precision preserves trust: users who get one targeted, explained reset per real incident keep taking your security emails seriously. Log the sweep, the affected count and the reset completion rate, that record is both your incident-response evidence and the data that justifies the program when someone asks what security spend bought.

More email breaches use cases

View all

New breach: DataCo

Your email was exposed · just now

Secure account

Breach Alerts

Warn users the moment their email address shows up in a newly disclosed data breach

CybersecurityMonitoring

Identity risk

78/100
4 prior breaches · manual review

Risk Scoring

Raise risk scores for identities with prior breach exposure before approving transactions

FintechRisk
sam@corp.comBreached
MFA now required
•••

MFA Enforcement

Require stronger authentication for accounts whose emails appear in known breaches

BankingAuthentication
Start with 500 free credits
$curl https://encrata.com/api/agent/lookup -H "Authorization: Bearer YOUR_API_KEY" -d '{"e": "satya@microsoft.com"}'