Google password warning
 

I received an email earlier telling me that they (google) have found my password online, and that I should change it.

I use multiple passwords of course, all tied to my ntl email. But they don't specify which one or or which site!

Re: Google password warning
 

You can check here.

https://haveibeenpwned.com/

Forget that, it doesn't.

This one will email a report to you naming sites.

https://www.f-secure.com/gb-en/home/...-theft-checker

Re: Google password warning
 

If you trust that site, and it doesn't have any breach of its own !

Re: Google password warning
 

If you use Google to sync your passwords, this might help

https://www.blog.google/products/chr...d-protections/

Re: Google password warning
 

As far as I know, I have never had a google password, or used any google tools to store passwords. ???

Re: Google password warning
 

Re: Google password warning
 

Have you checked the email header?

What’s the From address?

Sounds spammy...

Re: Google password warning
 

If I go into my Google account I can check for any security issues and I would assume if the email was legitimate it would be reflected in an issue being recorded in 'my account' area.

Re: Google password warning
 

Looks very suspect to me, dont click on the link.
It probably takes you to a spoof site to catch your google login details.

Re: Google password warning
 

The header looks perfect (accounts.google.com), and instead of clicking on the link, I typed it in and arrived on the acccounts.google.com page.

But I can't go any further as I have no google password. So it's all a bit moot.

Re: Google password warning
 

You don't have a 'Google account' then? :shrug:

Yet you receive an Email from Google (security) saying they've found some 'unspecified' passwords that belong to you . . . and suggest you 'log in' to change things ;)

Re: Google password warning
 

Did hovering over the blue button show the same URL as in the text below it?

Try going to Google Account Recovery and entering your email address. It will immediately say "Couldn't find your Google Account" if they have no record of that address.

Re: Google password warning
 

Yup, the email was the same. I tried the "I've forgotten my password" route and it asked me for the most recent password I could remember. :confused:

Re: Google password warning
 

I hate the ones where you have to press"Forgot Password", and then enter a new one only for it to say that you cannot enter an old password :rolleyes:

Indeed.....I wouldnt wanna put ANY valid info in any of those!!

Re: Google password warning
 

ignore all that google failed me

---------- Post added at 10:57 ---------- Previous post was at 10:50 ----------

The site you are replying to at the worst would add your email to a list it does not ask for passwords

---------- Post added at 11:01 ---------- Previous post was at 10:57 ----------

if you did want to see where it actually goes you could test it in a sand box of some type either sandboxie or Windows Sandbox if you are running 10 Pro.

I often play with stuff to see what it is actually trying to do often in a VM or Sandbox but I do have an old machine I do it on that does nothing else

Re: Google password warning
 

Only thing you supply when using the Have I Been Pwned website is the email address to lookup, that's all you can do!
(Apart from the latest Facebook one where there were more phone numbers, and it's only that Facebook breach that has phone numbers recorded)


It then returns a list of any breaches that email address was found in.

Re: Google password warning
 

I contacted google directly and asked if the email warning was genuine.

"Yes, we detected a leak of emails and passwords from a few servers not related to google. It is highly recommended that you visit each site in the report and change your password".

I was given a hint at to what the account password was, and from that I realised it was made by our son. Obvious from his choice or words. Luckily he had it written down from 4 years ago!!

So I checked the list of compromised passwords, and they are mostly on sites I haven't been on for at least a couple of years. None of them would have any financial or personal details on them, but I'll plod through the list of 13 and change passwords IF I can remember what the present ones are!

So mystery solved, but I still wonder how google got all the info?

Re: Google password warning
 

Because that is their main line of business - data.

Re: Google password warning
 

worth a bloody fortune too :Yes: