article thumbnail

When Accounts are "Hacked" Due to Poor Passwords, Victims Must Share the Blame

Troy Hunt

It's just another day on the internet when the news is full of headlines about accounts being hacked. This is when hackers try usernames and password combos leaked in data breaches at other companies, hoping that some users might have reused usernames and passwords across services. Without doubt, blame lies with them.

Passwords 237
article thumbnail

No, Spotify Wasn't Hacked

Troy Hunt

Here's a perfect example of what I'm talking about, this one eventually triggering an email to me just last week: Let's imagine you're the first person on the list; you get a notification from HIBP, you check out the paste and see your Hotmail account listed there alongside your Spotify password and the plan you're subscribed to.

Hacking 224
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GUEST ESSAY: Until we eliminate passwords, follow these 4 sure steps to password hygiene

The Last Watchdog

With so much critical data now stored in the cloud, how can people protect their accounts? Until biometrics or a quantum solution change our everyday approach to encryption, passwords remain our first line of defense against data breaches, hackers, and thieves. 3) Activate 2FA on all accounts. 3) Activate 2FA on all accounts.

Passwords 228
article thumbnail

Relax. Internet password books are OK

Malwarebytes

Passwords are a hot topic on social media at the moment, due to the re-emergence of a discussion about good password management practices. There’s a wealth of password management options available, some more desirable than others. The primary recommendation online is usually a software-based management tool.

Passwords 129
article thumbnail

The 773 Million Record "Collection #1" Data Breach

Troy Hunt

If you have a bunch of passwords and manually checking them all would be painful, give this a go: If you use 1Password account you now have a brand new Watchtower integrated with @haveibeenpwned API. Also, looks like I have to update some passwords ?? Thank you, @troyhunt ?? In this case, it's almost 2.7

article thumbnail

The 42M Record kayo.moe Credential Stuffing Data

Troy Hunt

These attacks typically take data from multiple breaches then combine them into a single unified list so that they can be used in account takeover attempts on other services. If you are, get a password manager ( I use 1Password ). In short, this data is a combination of sources intended to be used for malicious purposes.

Passwords 158