Data leak warning

[Oh6]

A password alone is essentially worthless, a password, especially a reused password along with an email address, on the other hand.

HaveIBeenPwned

Whack your email into there, it will list all the data breaches where your email and possibly your passwords and other data may have been leaked.

Yes, Have I Been Pwned - https://haveibeenpwned.com/ is a very good and reputable site

 

[Overlay]

I think this has been flagged up post the latest apple upgrade 17:.6.1 i have just changed 4 passwords which included security even on apple/icloud
Hopefully its just a general fooooopa,

 

[csl]

A password alone is essentially worthless, a password, especially a reused password along with an email address, on the other hand.

HaveIBeenPwned

Whack your email into there, it will list all the data breaches where your email and possibly your passwords and other data may have been leaked.

Our SD system does a check with haveibeenpwned.com as well and does recommend you change password if it thinks it may be compromised.

Judging by this post by @Overlay:

I think this has been flagged up post the latest apple upgrade 17:.6.1 i have just changed 4 passwords which included security even on apple/icloud
Hopefully its just a general fooooopa,

It does seem to be Apple’s own system that has either been bit too sensitive, or it hasn’t been as helpful explaining why it chose to recommend the password be changed.

The important thing is he changed his password just in case.

Alex

 

[Oh6]

Passwords should always be unique to an account/site as well, this doesn't have to be complicated to achieve.

At its simplest, you could just include the first or last letter of the name of site/business at the beginning or end of your password.

So for this site, your password would change from the likes of:

• MyPassword1!

To something like:

• MyPassword1!t
  • Using the "t" from the start of the website domain and adding it to the end of your password.

There are countless variations and improvements to what you could do, but having unique pairings of usernames and passwords for every site you interact with, is a massive improvement.
That way if your details are compromised it doesn't give the bad guys access to every site that you use.

 

[zambezi]

essentially worthless, a password, especially a reused password

Simple rules will keep your passwords relatively secure online:

• Ensure your url link to a website starts thus: https:// <the "s" means data is encrypted between your pc and website
• Use different passwords for every website
• Change passwords often
• Use randomly generated passwords of more than 20 characters [you do not need to remember them if you use a password vault like KeepassXC]

If you generate a password using the extended ascii character set, it essentially cannot be brute forced: