Why do I get a notification that my password is breached?

Summary: This article explains what happens when your password has been involved in a data breach, either when signing up or logging in. You will learn how our platform protects your account by asking you to create a new password and how to reset it securely. This article answers the following questions:

• How do I know if my password has been breached?
• What should I do if I get a notification about a breached password?
• How can I reset my password after being notified of a breach?

In recent times, data breaches have become an increasing threat to online security. Hackers can buy lists of stolen credentials, and use these to access user accounts. To protect you, our platform checks whether the password you're using has been involved in any known data breaches.

What happens if my password has been breached?

When you log in or sign up, we check if your password has been involved in a breach. If it has, you will be prompted to create a new password to ensure your account remains secure. This prevents hackers from accessing your account with stolen credentials.

• When signing up: If the password you want to use has been breached, you will be asked to choose a different, more secure password before completing the sign-up process.
• When logging in: If you use a breached password to log in, you will be required to reset it. We will send you an email with a secure link to change your password.

How to reset your password if it's been breached:

1. Log in: Attempt to log in as usual.
2. Password breached notification: If your password has been found in a breach, you'll see a message asking you to reset your password.
3. Check your email: We will send you an email with a secure link. Click the link to go to the password reset page.
4. Create a new password: Follow the instructions to create a new, strong password that hasn't been used before.
5. Login again: Once your password is updated, log in with your new credentials.

If you're unable to change your password after receiving the email, make sure the link hasn't expired or try requesting a new one.