For years, technology pundits have talked about replacing passwords with better technology, but for now, we are still ruled by passwords — often hundreds of them for all the devices, apps, services, and websites we routinely visit. And despite our best efforts at creating strong and secure passwords, they sometimes get compromised. Do you have any compromised passwords on your phone or computer? Here are some ways to find out.
Signs your password has been compromised
Unfortunately, the implications of having a compromised password are dire, and most of the obvious warning signs are evidence that you've already been hacked, which is hardly ideal. That's why you should proactively check for compromised passwords occasionally, and don't wait until catastrophe strikes. Here are the top signs you might have a compromised password.
- A website notifies you that someone has changed your password. Hackers may try to change the password of a website or service after gaining access with a cracked password. This way they can take control away from you, the rightful owner. Thankfully, many websites send a confirmation email after changing the password, or ask you for confirmation with a second-factor authentication. If you get notified of a password change, your password has likely been compromised and you should take action quickly to protect your account.
- You see changes to a website or account you didn't make. If a hacker successfully logs into one of your accounts, you might see changes that you didn't do yourself. If so, take immediate action to change the password before the hacker does, which could potentially cause you to lose control of your account entirely.
- You find your password at HIBP. Troy Hunt, a Microsoft executive, operates a helpful website called HIBP (Have I Been Pwned). You can enter your credentials here to see if you have any compromised accounts. It's a fast, easy, and safe way to check on your overall security.
- You see your password listed in a leaked password checker. On a regular basis, you should check your passwords using a tool built into your Mac, Windows, iPhone, or Android. You need to perform this check yourself because it is not automatic.
- Your info appears in a password dump. On a depressingly regular basis, there are news reports of major hacks that include huge collections of leaked passwords. When such news stories break, there are often websites or tools provided so you can check to see if your own credentials were captured.
- Someone tells you that you've been hacked. If a friend, colleague or family member informs you that they received something unusual from one of your accounts or noticed odd behavior from you online, consider yourself hacked and take immediate action to see if you can access the account and change the password.
Advertisem*nt
How to find compromised passwords on a Mac
If you have macOS Monterey, you can use the built-in password checker to see if any of your passwords are potentially compromised.
1. Click the Apple icon at the top left of the desktop and then click System Preferences.
2. Click Passwords. You may need to enter your password to continue.
3. On the Passwords page, you can browse your potentially compromised passwords. Click any entry for more details, and click Change Password on Website to update it.
Advertisem*nt
How to find compromised passwords in Windows
Unfortunately, there is no general-purpose password checker in Windows, but Microsoft includes one in its Edge browser. If you use Edge, you can use that tool, though if you mainly use Chrome, you'll want to use the dedicated password checker in that browser instead.
1. Start the Edge browser.
2. In the address bar at the top of the screen, enter: edge://settings/passwords/PasswordMonitor and press Enter.
3. In the Leaked Passwords section, click Scan now.
Advertisem*nt
How to find compromised passwords in Chrome
You can use the built-in password checker in Chrome to find compromised passwords.
1. In the Chrome browser, click the three-dot menu at the top of the screen and in the drop-down menu, choose Settings.
2. On the Settings page, click Privacy and security.
3. In the Safety check section, click Check now.
4. When the safety check is complete, click Review to the right of Password Manager.
5. On the Check passwords page, you can browse the list of potentially compromised passwords. Click Check password for any entry to let Chrome help you update the password.
Advertisem*nt
How to find compromised passwords on an iPhone
Apple includes a password manager for Safari on your iPhone, and you can use it to get security recommendations which will reveal if there are any known compromised passwords.
1. Start the Settings app on your iPhone.
2. Tap Passwords.
3. On the Passwords page, tap Security Recommendations.
4. On the Security Recommendations page, you can browse the passwords which pose security risks. Tap the entry for more details or tap Change Password on Website to go to the site and perform a password reset.
Advertisem*nt
How to find compromised passwords on an Android
Much like in the desktop browser version of Chrome, Chrome on Android has a password checker built in.
1. Start the Chrome app on your Android device.
2. Tap the three-dot menu at the top of the screen.
3. Tap Settings, then tap Passwords.
4. On the Passwords page, tap Check passwords.
5. After a moment, you'll see a list of all the saved passwords which may pose a security threat. Tap Change password to let Chrome assist you in changing the password.
Freelance Writer
Dave Johnson is a technology journalist who writes about consumer tech and how the industry is transforming the speculative world of science fiction into modern-day real life. Dave grew up in New Jersey before entering the Air Force to operate satellites, teach space operations, and do space launch planning. He then spent eight years as a content lead on the Windows team at Microsoft. As a photographer, Dave has photographed wolves in their natural environment; he's also a scuba instructor and co-host of several podcasts. Dave is the author of more than two dozen books and has contributed to many sites and publications including CNET, Forbes, PC World, How To Geek, and Insider.
