Log in

View Full Version here: : Check if your passwords have been compromised


Exfso
27-02-2018, 01:46 PM
This is a handy site to check if your passwords have been compromised, I found one of mine on it.

https://haveibeenpwned.com/

bojan
27-02-2018, 02:15 PM
Are you sure this website is not data collection centre ?

skysurfer
27-02-2018, 04:06 PM
Exactly possibly another malware site.
One important rule: Let as few as possible apps on cellphone / computer connect with the internet.

Exfso
27-02-2018, 04:26 PM
This is the site that gives the information and they are very reputable. Been around for yonks.

https://www.howtogeek.com/343947/how-to-check-if-your-password-has-been-stolen/

LewisM
27-02-2018, 04:27 PM
Checking your password strength on the web is, sorry Peter, NOT a good idea! Data Miner will get ya...and then you are BOHIC...

Exfso
27-02-2018, 06:16 PM
I know exactly where you are coming from, but Computer Geeks are extremely good, and I cannot see them recommending a site that is dodgy, they are pretty damn good at doing their homework and getting it right.

luka
27-02-2018, 07:09 PM
The site is legit. You only have to enter your email address and no passwords so it is not collecting much useful information.

LewisM
27-02-2018, 07:24 PM
Oh, so it's a pwned site, not a password strength checker? (I didn't even look at the link).

But, even adding your email to a "checker" can lead to lots of spam...

Exfso
27-02-2018, 09:02 PM
Thanks Luka, I did not think they would point to a dodgy site.

sil
06-03-2018, 11:45 AM
..except a valid email address that can be sold to telemarketers.
And any site that is for testing a password strength (not this site) can be used to collect passwords people are using or want to use, to add to a dictionary file to help dictionary attacks succeed before resorting to brute force. Human nature being what it is people often use the same password or a varient over and over, especially online. its just either for people to have a single password for all online forums or for all their online banking accounts etc. very few people generate high strength random sequences for any accounts in practice. or create throwaway email accounts for all those stupid "must supply valid email for this site you'll only ever visit the once" websites. ANY little fragment of information you type into a website can and probably will be collected for someone to profit from.