How do I check if my password was leaked?

Concerns & risks

You were trying to stay safe online, and you heard about a big data breach.

Leaked passwords get reused by attackers.

Causes & evidence

Many password managers and browsers warn about breached passwords. See multi-factor authentication.

What to do

1. Check your browser or password manager's security check.
2. Change any flagged passwords.
3. Turn on MFA.

Common mistakes: Common mistakes: ignoring breach alerts. Change any affected passwords, starting with email. Use unique passwords going forward. Watch for phishing emails pretending to be breach notices. Services like Have I Been Pwned let you check whether your email appeared in known breaches. Many password managers and browsers also warn you about leaked or reused passwords. If yours shows up, change that password and any other accounts where you used the same one, starting with email and banking. Turn on multi-factor authentication. Be wary of emails claiming to be breach notices; go to the service directly.

Speed Man tip: Unique passwords make leaks less painful.

Wrap-up: Use security check. Change flagged. MFA.