Possible Data Breach...? Password Updates POSSIBLY Required

Thanks for checking this out Ms. Carrie - you're the best.

 

If you use the same email address/password combination for multiple sites it's possible that another site has been compromised and Chrome is suggesting you change your password because of this.

If you want to check if your credentials have been exposed in a data breach, try here: https://haveibeenpwned.com/

You can also try using a password manager, such as LastPass. It lets you generate random passwords for each site you need credentials for, and it stores them in a safe. It's a bit mre secure than Chrome.

 

Excellent advice. Reusing passwords across sites is a MASSIVE security risk. Attackers regularly take password dumps from low security sites that have been breached and try them on high-security sites like banks, Gmail, Paypal, etc. It's called credential stuffing, and the success rate is way higher than it should be.

In addition to using a password manager you should enable two-factor authentication anywhere it's available. Then even if your password is guessed, there is another step someone has to go through before they can get access to your account.

 

two factor authentication is a bit of a pain, to be honest, if you're just looking to make a quick purchase or whatever, but in the end it's for our own good, so it seems churlish to complain. Haven't had any notifications relating to this site.