• wander1236@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      0
      ·
      5 months ago

      No, it’s just saying they found whatever the email is along with a password in some dark web database.

      The dumb part is that they don’t tell you any of the email address in the alert.

      • Forester@yiffit.net
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        5 months ago

        And pray do tell if it’s not being sold, why is it listed in some random data breach??

        . I just said it in layman’s terms. Op needs to reset his password cause someone is selling it.

        • IphtashuFitz@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          5 months ago

          My email address is literally registered on dozens of websites. I use a different completely random password, generated by a password manager, on every one of those sites. How would I know which website and which password was compromised based on this message?

          • takeheart@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            5 months ago

            Here’s a neat trick that works with some providers: you can include a + sign and an extra string of characters and it will still be delivered to the same address. Example:

            user083+some-online-shop@provider.net will receive the mail for user083@provider.net. So you can register with a different email address everywhere yet it all goes to the same account. If your account gets leaked or breached you’ll know where it happened thanks to the extra information behind the +.

              • takeheart@lemmy.world
                link
                fedilink
                English
                arrow-up
                0
                ·
                5 months ago

                You can narrow it down by length. Not perfect but it’s a start. Unless the *****s are always the same length like in some password fields. Hard to tell from the message.

                • Echo Dot@feddit.uk
                  link
                  fedilink
                  English
                  arrow-up
                  0
                  ·
                  edit-2
                  5 months ago

                  It’s not a good method is it? It relies on others not being really stupid

                  Oh hay Lets just make they reacted paid rise same length render tone, since that is real really easy.