I am getting a popup message saying that "A data breach on a site or app exposed your password.
Just to reiterate, Google nor Chrome has been hacked or breached. Please read below to understand what this message means for you.
Confirming this is a genuine message from Chrome. When you type your credentials into a website, Chrome will now warn you if your username and password have been compromised in a data breach on some site or app. It will suggest that you change them everywhere they were used.
Google first introduced this technology early this year as the Password Checkup extension. In October it became a part of the Password Checkup in your Google Account, where you can conduct a scan of your saved passwords anytime. And now it has evolved to offer warnings as you browse the web in Chrome.
You can control this feature in Chrome Settings under Sync and Google Services. For now, it is being gradually rolled out for everyone signed in to Chrome as a part of Google's Safe Browsing protections.
Username/email and password combination
Firstly, it does not matter on which website you see this new warning. The new message is a warning about the username/email and password combination that you just entered. That combination has been compromised in a breach of a website/app. What that actually means is you need to change your password on all websites/apps where you are using the same username/email and password combination.
Data breach source
Today, the warning does not show the source of the breach or what website the data was obtained from. It may be that Google does not store that and only stores the combinations (I suspect this to be the case.) Remember, you need to change your password on all websites/apps where you have used that same username/email and password combination anyway so where the breach came from only helps you so much.
References:
https://support.google.com/chrome/thread/23534509?hl=en
No comments:
Post a Comment