# megadose/holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

Repository: https://github.com/megadose/holehe
Canonical: https://ross.abutalabs.com/products/holehe
Language: Python
License: GPL-3.0
License Family: copyleft
Topics: information-gathering, osint, osint-tools, open-source-intelligence, python, email, social-network, instagram, twitter, trio, ebay, emails, osint-python, pypi, tellonym
Last push: 2024-09-10T20:24:32+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2260, "days_push": 722, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 14278, forks 1832 (observed 2026-08-28T04:11:06.626043+00:00)

## What it is
Holehe is an OSINT tool that checks whether an email address is registered on 120+ sites (Twitter, Instagram, Snapchat, etc.) by abusing the forgot-password function, without alerting the target. It runs as a CLI or as an embeddable async Python library and can return partially obfuscated recovery emails and phone numbers.

## Use cases
- check if an email is registered on twitter or instagram
- find accounts linked to an email address
- osint email enumeration during an investigation
- retrieve partial recovery phone numbers from an email
- integrate email-to-account lookup into a python tool
- run email reconnaissance from the command line

## When to choose
- you need to map an email address to registered accounts across many services
- you want a scriptable Python API or CLI for email OSINT
- you need results without triggering notification emails to the target

## When to avoid
- you need authorized security testing of your own systems rather than third-party account discovery
- you require guaranteed accuracy - rate limits and site changes can cause false results
- your use case may violate the terms of service or privacy laws of the targeted sites

## Facets
- artifact type: cli-tool
- maturity: active
- function: osint, web-scraping, http-client, cli
- domain: osint, security, privacy, developer-tools
- platform: python, cli, windows
- tags: email-enumeration, account-discovery, password-reset-abuse, osint-tools, async-python, trio, maltego-transform, linux, macos, docker

## Member repositories
- megadose/holehe (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:11:06.626043+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:12:40.930742+00:00, confidence not recorded.
  - readme: https://github.com/megadose/holehe (fetched 2026-08-28T04:11:06.626043+00:00, sha 56b8d70ba01b)
  - registry_pypi: https://pypi.org/pypi/holehe/json (fetched 2026-08-29T08:06:15.783703+00:00, sha 1e209ef57311)
- Data as of 2026-08-30T08:39:29.467469+00:00.