BILLIONS of passwords for online accounts have leaked to the web in recent years – and it’s easy to find out if yours are among them.
Google has built a handy tool that allows users of its Chrome web browser to quickly check if their online credentials are compromised.
Google has a web browser extension that warns you if your usernames and passwords have been compromised
Google released a handy ‘how to’ to help you set up its password-protecting web browser extensionCredit: Google
The tool, called Password Checkup, is a free add-on for Chrome released in 2019 in an attempt to boost users’ online security.
It scans known databases of usernames and passwords that have been stolen from websites by hackers and made available online.
The tool, for instance, likely pulls from a number of recent major online breaches, such as the 2012 LinkedIn hack.
The break-in saw the usernames and passwords of 6.5million LinkedIn users stolen by cyber crooks and sold online.
Google’s Password Checkup encourages you to change your usernames and passwords if they’ve been leaked by hackers.
It displays a warning whenever you sign in to a website using “one of over 4billion usernames and passwords” that have been compromised.
“Since our launch, over 650,000 people have participated in our early experiment,” Google’s Jennifer Pullman explained in 2019.
“In the first month alone, we scanned 21million usernames and passwords and flagged over 316,000 as unsafe – 1.5% of sign-ins scanned by the extension.”
There’s obviously a huge risk for anyone whose username and passwords from different sites have been hacked.
It’s important to immediately change your log-in details to stay safe.
But even passwords uploaded online without associated usernames can put you at risk.
If you use a very simple password, it’s likely someone else does too – and they may have been hacked themselves.
Hackers buy huge lists of these compromised passwords from lots of different sites because people often re-use them.
So hackers are much more likely to gain access to an account by forcing a long list of “known” hacked passwords than trying random letters or numbers.
“Hijackers routinely attempt to sign in to sites across the web with every credential exposed by a third-party breach,” said Pullman.
“If you use strong, unique passwords for all your accounts, this risk disappears.”
How to check your password
The free Password Checkup software can be loaded onto Google Chrome and lets you know if your account details have been compromised in a cyber attack or data breach.
Once installed, the Chrome extension runs in the background of your browser and checks any login details you used.
If your password or username matches a Google database of more than 4billion compromised credentials, the software will flag them.
An alert that pops up on your screen reads: “Password Checkup detected that your password for [website] is no longer safe due to a data breach. You should change your password now.”
If a new data breach occurs, the tool will let you if any of your passwords were compromised the next time you login to Chrome.
It gives you any exposed accounts in a small list that you can click through to change your passwords.
All information is encrypted, and Google says it has no way of seeing your data.
“We built Password Checkup so that no one, including Google, can learn your account details,” Google said.
“Password Checkup was built with privacy in mind. It never reports any identifying information about your accounts, passwords or device.”
You can download Password Checkup from the Chrome webstore by clicking here.
Alternatively, popular web-tool Have I Been Pwned also lets you check if you’ve ever been hacked.
Google’s Chrome extension shows this warning if you’re using a breached passwordCredit: Google
In other news, a Google Maps fan has spotted a “secret” military base tucked away in the middle of the Sahara desert.
The Sun’s favourite alternative to a games console is the Oculus Quest 2 VR headset.
Check out the wildly impressive Panasonic 65HZ1000 TV, which makes most tellies look rubbish.
And Dell’s Alienware R10 Ryzen Edition is a gaming PC powerhouse that crushes both the new consoles.
We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at [email protected]