Identity Inspector regularly checks whether your email addresses, phone numbers, or company domains appear in known data breaches—and notifies you if it finds anything.
Getting Started
Create Account
- Open Identity Inspector and select Create Account.
- Enter your email address and a password with at least 8 characters.
- We will send you an email with a confirmation link. The link is valid for 24 hours.
- After clicking the link, you can log in.
Didn't receive an email? Check your spam folder. If still nothing arrives, the address may already have an account—in this case, try Forgot Password.
Where does Identity Inspector run?
As a program on Windows and macOS. Your data is stored in your account, so you can log in on multiple devices.
Adding Identities
Under Protection, you define what should be monitored. Three types are possible:
Email address
Enter the address, click Add. You will receive a confirmation email at this address. Monitoring only begins after confirmation—this ensures that no one can register foreign addresses.
Phone number
From the Premium Edition. You will receive an SMS with a six-digit code. The number is only monitored after the code has been confirmed.
The code is valid for ten minutes. Ten requests are possible per number, twenty per account per day.
Company Domain
From the Business Edition. With this, we monitor all email addresses of a domain at once—for example, every mailbox of your company.
Because this is far-reaching, you must prove once that you own the domain. To do this, you create a TXT record with your DNS provider, which Identity Inspector displays to you. Propagation in the DNS usually takes five to ten minutes; after that, we check automatically.
Domains from free mail providers (gmail.com, web.de and similar) cannot be monitored as a domain—there you can only enter individual addresses.
Understanding Hits
Under Hits, you can see where one of your identities has appeared in a known data breach. For each hit, you will find what happened, what types of data are affected, and what to do.
The Severity Levels
| Critical | Payment data, identification data or similarly sensitive information is affected. You should act immediately here. |
| High | Passwords or password hashes are affected. |
| Medium | Personal information such as name, address or date of birth. |
| Low | Essentially the email address itself. |
What you should do in case of a hit
- Change the password with the affected provider—immediately.
- Activate two-factor authentication there, if possible.
- Have you used the same password elsewhere? Then change it there too. This is the most common way for a leak to cause secondary damage.
"Mark as done"
Once you have processed a hit, mark it as done. It will then disappear from the active list but will remain accessible under Done.
Why some descriptions are in English
The information about data breaches comes from the Have I Been Pwned service and is available there in English. We translate it by machine; where this has happened, a corresponding note is below the text. If no translation is yet available for your language, you will see the English original.
Fraud Check
The fraud check examines suspicious emails, messages, and links for typical characteristics of fraud attempts. Available from the Premium Edition, only on the computer.
The first time: the AI model
The analysis runs entirely on your device. For this, a model of about 2 GB is downloaded once. After that, the fraud check also works without an internet connection.
After each program start, the model is loaded into RAM once—this takes a few seconds and is not a new download.
What you can insert
- Email—preferably the complete text including sender and subject.
- Message—SMS, WhatsApp or other messengers.
- Link—only the address. The link is not opened, only examined.
Please note: The fraud check provides an assessment, not proof. If in doubt, check via a second, known method—for example, call the alleged sender at the number you know yourself, not the one from the message.
Why only on the computer: The model requires RAM and processing power that are not available on smartphones and in the browser.
Password Tools
Under Settings, you will find three tools.
Check Password
Checks a single password against a collection of over 850 million passwords from known data breaches.
Your password never leaves your device. We locally calculate an SHA-1 hash and transmit only its first five characters. The service responds with all matching entries, and the comparison takes place on your end again. This is called k-anonymity.
Monitor Passwords
Instead of checking once, you can have passwords monitored permanently. Only the hash is stored, never the password itself. If one appears in a new leak, we will notify you.
Generate Secure Password
Optionally a random string of characters or a memorable sequence of words. For the character string, you can exclude confusable characters (0, O, 1, l, I)—helpful if you have to write down the password.
Members
From the Premium Edition, you can monitor other people—such as family members. Each person is a member with their own email addresses and numbers. All hits are combined in your overview.
| Free / Standard | only the account holder |
| Premium Edition | up to 5 members |
| Business Edition | unlimited |
A member's name is only used locally—a real email address is not required for this.
Editions and License
Identity Inspector is available as a one-time purchase with an annual renewal. No subscription.
Enter License Key
- Open Settings → License.
- Enter the license key from your order confirmation. Formatting happens automatically as you type.
- Click Activate Now.
Your license is valid for a limited number of devices. If the maximum is reached, you can release a device in your Engelmann customer account.
Data Protection
Identity Inspector is a product of Engelmann Software GmbH from Dortmund, Germany. Development and operation take place in Germany.
How we handle your data
- Your email addresses and numbers are stored encrypted. We use hashes for searching, not plaintext data.
- Passwords are stored exclusively as hashes.
- The analysis in the fraud check runs entirely on your device. Nothing is sent to a server.
Usage Statistics
Anonymous statistics are disabled by default. If you enable them, we learn which functions are used and whether the software runs stably—no email addresses, no license keys, no content. Can be toggled at any time under Settings → Data Protection.
Export Your Data
Under Settings → Data Protection → Export My Data, you can receive all data stored for your account as a JSON file (Art. 15 GDPR).
Manage Account
Change Language
Settings → Language. Identity Inspector speaks German, English, French, Spanish, Italian, Dutch, Polish, Portuguese, Turkish, Czech, and Russian.
Change Password
Log out and select Forgot Password on the login page. You will receive a link via email.
Delete Account
Settings → Manage Account → Delete Account. For security, you must enter your password.
Deletion does not happen immediately: your account will be permanently removed after 30 days. Within this period, you can revoke the process at any time—the link for this can be found in the confirmation email. After that, the data is irretrievably deleted.
If Something Isn't Working
I am constantly logged out
Please update to the latest version (Settings → Check for Updates).
The confirmation code is not arriving
For email: Check your spam folder. For SMS: Enter the number in international format (+49 ...). Wait one minute before requesting a new code—the service will reject the request before that.
My domain cannot be checked
Two causes are possible: The TXT record has not yet propagated in the DNS (wait five to ten minutes), or the domain has not yet been activated with our data partner. In the second case, Identity Inspector will display a corresponding notice. This is explicitly not an all-clear—it just means that we cannot check at the moment.
Log file for support
Settings → App → Show Log File. This opens the folder with the file. Attach it to a support request if we ask you to.
Support
If you are stuck, you can reach us at engelmann.com/pages/support.
Engelmann Software GmbH · Menglinghauser Str. 378 · 44227 Dortmund
HRB 15207 · Managing Director Pit Engelmann