Check if your email/password is exposed during data breaches

Calithran

Regular Member
Joined
Feb 7, 2017
Messages
216
Reaction score
111
Some of you might know about these tools, but some might not. Some tools can check whether your email or password has been stolen during data breaches/hacks.

If you find out that your password was exposed, then you will want to change the password right away.

Check whether your password has been stolen: https://haveibeenpwned.com/Passwords

Check whether your email had been exposed here (scroll down a little to see the email form): https://whatismyipaddress.com/breach-check

The above tool (whatismyipaddress.com) allows me to view when and where the data breach happens. For example, my Yahoo Mail account was stolen when canva.com was breached in 2019.
canva-breach.png

Luckily my password is still safe, probably because I use a strong password.
password.png

If you want to be notified in case your account was compromised in the future, subscribe here: https://haveibeenpwned.com/NotifyMe

If you want to secure all online accounts, I highly recommend that you use a password manager.
Lastpass: https://www.lastpass.com
Bitwarden: https://bitwarden.com
KeepassXC: https://keepassxc.org

Data breaches are serious security issues and it happens every year.
Gmail and Mozilla were breached in 2014, Youtube was breached in 2020. Facebook was breached many times in 2013, 2018, 2019.
For a full list of data breaches: https://en.wikipedia.org/wiki/List_of_data_breaches

If you are using major services like Gmail, Facebook, or Outlook, you should secure your accounts with 2FA.
 
Last edited:
Thanks mate for this share but do you think this one is safe because we are providing the passwords here in order to check our passwords had been stolen or not.
 
Thanks mate for this share but do you think this one is safe because we are providing the passwords here in order to check our passwords had been stolen or not.
The website is safe, at least from my research. Links for your reference:
How the website haveibeenpwned.com protect the privacy of searched passwords: https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2#cloudflareprivacyandkanonymity

And wikipedia articles: https://en.wikipedia.org/wiki/Have_I_Been_Pwned?
About the creator of haveibeenpwned.com: https://en.wikipedia.org/wiki/Troy_Hunt

Anyway, if you don't trust the website, then don't enter your master password or your only password there. But you will want to check your email, whether it's been stolen or not. If it was involved in a data breach, then you better change its password.
 
Last edited:
If you use Chrome and if you type in a username + password combo, which exists in a known databreach/leak, the browser shows a warning. It works for existing accounts too.
If you let Chrome to store your credentials (for non-important sites it shouldn't be an issue), under 'Settings/Safety check/Passwords' you can test the credentials of all stored sites in one go and Chrome will show a total and list all the sites, where the credentials are compromised.
 
If you are using major services like Gmail, Facebook, or Outlook, you should secure your accounts with 2FA.
If you are looking for 2FA:
Authy. No smartphone is required. Download the app into your PC and register with SMS: https://authy.com/download/
Free OTP. Open-source 2FA app. Requires smartphone, whether Android or iOS: https://freeotp.github.io/

If you are looking for secure, alternative email providers:
Protonmail. Open-source webmail. Hosted in Switzerland.: https://protonmail.com/
Tutanota. Open-source webmail. Hosted in Germany: https://tutanota.com/
 
So you wanna say to check if my password is "secured , not stolen bla bla bla " I need to put my password on a website who is storing loads of passwords ?

THATS SMART BRO
 
Back
Top