In this article: What is it and how to check your passwords in SafeInCloud
1. What is a compromised password
Compromised passwords are passwords previously exposed in data breaches. This exposure makes them unsuitable for ongoing use as they're at much greater risk of being used to take over other accounts.
SafeInCloud uses the well-known and trusted website haveibeenpwned.com to check if any of your passwords have been compromised. This site has a database of over half a billion passwords that have been leaked. SafeInCloud does not send any of your passwords or their hashes to this site. Instead, a k-anonymity approach is used to ensure that your passwords are secure during verification. See links below for more details:
- https://haveibeenpwned.com/Passwords
- https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/
- https://en.wikipedia.org/wiki/K-anonymity
2. How to check passwords
Select Compromised Passwords from the list of labels under Security section.
Compromised Passwords page contains a list of cards with found compromised passwords and info when the last check was completed.
Press Check to start a new search for compromised passwords in your database (or select Tools > Check passwords from the menu). On the check completion result on how many compromised passwords were found will be shown.
!NB result is reflecting how many unique passwords were found. However, the resulting list of cards can contain more cards, if some cards have the same passwords