5 Million Online Passwords Leaked, Check Yours Now

5 Million Online Passwords Leaked, Check Yours Now (Updated)

According to the Daily Dot, nearly 5 million usernames and passwords have been leaked on a Russian Bitcoin forum. Here's what you should know.

The list has since been taken down, and there's no evidence that Gmail itself was hacked — just that these passwords from accounts associated with Gmail have been leaked. Most sources are saying that lots of the information is quite old, so chances are they were leaked long ago — though others are claiming 60% of the passwords are still valid (not to mention really, really horrible).

5 Million Online Passwords Leaked, Check Yours Now (Updated)

To check if your password was one of the leaked, plug your Gmail address into this tool (which also checks against recent Yandex and Mail.ru leaks). The tool is rather swamped right now, so it may be difficult to access. If you'd rather not give your email address to a tool you don't trust, you can alternatively change all of your passwords right now.

No matter what you do, make sure you using a strong password on all your accounts and that you've enabled two-factor authentication. Hit the link to read more.

We still don't know the full details, but the lesson remains the same: use secure passwords and enable two-factor authentication on all of your accounts!

5 Million Gmail Passwords Leaked to Russian Bitcoin Forum [The Daily Dot]


    it lists mine as leaked, but it's a password from about 3 years ago - maybe older ...

    plus they all have NO CAPITALS in the passwords. make sure you add 1 number and 1 capital people!

    Um who's done that "Is leaked" website? Cloud they not just be farming email addresses to target? (I know sounds silly but...)

      If that is a concern (it is) the form allows you to *** up to 3 characters. Helps anonomise it a little

        Interesting. ***@gmail.com turns up 1824 matches, **@gmail.com turns up 393, and *@gmail.com turns up 36.

        Looks like not all emails on the list were verified.

      Don't try to put your email address, it might be a phishing scam.. Better to change your password .

Join the discussion!

Trending Stories Right Now