Check if your passwords have been compromised

[Exfso (Peter)]

This is a handy site to check if your passwords have been compromised, I found one of mine on it.

https://haveibeenpwned.com/

[bojan]

Are you sure this website is not data collection centre ?

[skysurfer]

Originally Posted by bojan

Are you sure this website is not data collection centre ?

Exactly possibly another malware site.
One important rule: Let as few as possible apps on cellphone / computer connect with the internet.

[Exfso (Peter)]

This is the site that gives the information and they are very reputable. Been around for yonks.

https://www.howtogeek.com/343947/how...s-been-stolen/

[LewisM]

Checking your password strength on the web is, sorry Peter, NOT a good idea! Data Miner will get ya...and then you are BOHIC...

[Exfso (Peter)]

I know exactly where you are coming from, but Computer Geeks are extremely good, and I cannot see them recommending a site that is dodgy, they are pretty damn good at doing their homework and getting it right.

[luka]

The site is legit. You only have to enter your email address and no passwords so it is not collecting much useful information.

[LewisM]

Oh, so it's a pwned site, not a password strength checker? (I didn't even look at the link).

But, even adding your email to a "checker" can lead to lots of spam...

[Exfso (Peter)]

Thanks Luka, I did not think they would point to a dodgy site.

[sil (Steve)]

Originally Posted by luka

The site is legit. You only have to enter your email address and no passwords so it is not collecting much useful information.

..except a valid email address that can be sold to telemarketers.
And any site that is for testing a password strength (not this site) can be used to collect passwords people are using or want to use, to add to a dictionary file to help dictionary attacks succeed before resorting to brute force. Human nature being what it is people often use the same password or a varient over and over, especially online. its just either for people to have a single password for all online forums or for all their online banking accounts etc. very few people generate high strength random sequences for any accounts in practice. or create throwaway email accounts for all those stupid "must supply valid email for this site you'll only ever visit the once" websites. ANY little fragment of information you type into a website can and probably will be collected for someone to profit from.