Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

And regularly check for that password on haveibeenpwned and other breached password databases.


Do you trust the database to not have been hijacked to capture checked passwords?

A better advice is to delete accounts you don't use. If not possible (illegal in EU now) scramble private data and the password.

Download the databases yourself and check them locally.

Changing passwords regularly also limits the damage.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: