Password Checkup: Google launches new tool to help protect your accounts

guest · Feb 5, 2019

Google launches new tools to help protect your accounts
February 15, 2019
https://betanews.com/2019/02/05/google-new-password-tools/

Password Checkup is a new Chrome extension which detects if a username and password on a site you use has been compromised. If it has, the extension will trigger a warning and suggest that you change your password. This proactive safety measure reduces the risk of account hacking by ten times, Google says.

The other tool, aimed at developers, is Cross Account Protection, this addresses vulnerabilities in third-party sites and apps that you may have signed into using your Google credentials. Designed to be implemented by apps and sites, it means Google is able to tell them that an issue that could put information at risk has been detected.

"With technologies like Password Checkup and Cross Account Protection, we're continuing to improve the security of our users across the internet, not just on Google -- and we'll never stop improving our defences to keep you safe online."
Click to expand...

Google blog entry: Protect your accounts from data breaches with Password Checkup

Google Chrome extension Password Checkup

Gandalf_The_Grey · Feb 5, 2019

Will this extension still work if you use a password manager (LastPass for me) for filling in your username and passwords?

Floyd 57 · Feb 5, 2019

Gandalf_The_Grey said: ↑

Will this extension still work if you use a password manager (LastPass for me) for filling in your username and passwords?
Click to expand...

This isn't the stone era, it should

The new tools are designed to raise awareness of account issues.
Click to expand...

If they REALLY wanted to raise awareness, they could put a "use a password manager" message on google.com (and the country specific domains), with some explanation on why people should do it, and everyone would know about it as the entire globe uses google.com (pretty much)

Also, an extension which has "Read and change all your data on the websites you visit" permission and is made by google, idk about that...

It never reports any identifying information about your accounts, passwords, or device. We do report anonymous information about the number of lookups that surface an unsafe credential, whether an alert leads to a password change, and the domain involved for improving site coverage
Click to expand...

Better use these: https://haveibeenpwned.com/ , https://hacked-emails.com/ , https://www.dehashed.com/ , https://breachalarm.com/ , https://sec.hpi.de/ilc/search?lang=en

guest · Aug 15, 2019

New Research: Lessons from Password Checkup in action
August 15, 2019
https://security.googleblog.com/2019/08/new-research-lessons-from-password.html

Since our launch, over 650,000 people have participated in our early experiment. In the first month alone, we scanned 21 million usernames and passwords and flagged over 316,000 as unsafe---1.5% of sign-ins scanned by the extension.

Today, we are sharing our most recent lessons from the launch and announcing an updated set of features for the Password Checkup extension. Our full research study, available here, will be presented this week as part of the USENIX Security Symposium.
Helping users re-secure their unsafe passwords
Our research shows that users opt to reset 26% of the unsafe passwords flagged by the Password Checkup extension. Even better, 60% of new passwords are secure against guessing attacks—meaning it would take an attacker over a hundred million guesses before identifying the new password.
Click to expand...

Improving the Password Checkup extension
Today, we are also releasing two new features for the Password Checkup extension.

The first is a direct feedback mechanism where users can inform us about any issues that they are facing via a quick comment box.
The second gives users even more control over their data. It allows users to opt-out of the anonymous telemetry that the extension reports, including the number of lookups that surface an unsafe credential, whether an alert leads to a password change, and the domain involved for improving site coverage.
Click to expand...

guest · Oct 2, 2019

Google's Password Manager Now Warns About Compromised Accounts
October 2, 2019
https://www.bleepingcomputer.com/ne...manager-now-warns-about-compromised-accounts/

Google's Password Checkup feature is now integrated directly into your Google Account and will warn you if your saved passwords have security issues such as weak strength or have been compromised through data breaches.

Starting today, Google has now integrated the Password Checkup tool directly into your Google Password Manager. This means you can easily check if your passwords are secure with a click of a button in your Google Account.
To access the Password Checkup tool, you simply go to your Google Password Manager at https://passwords.google.com and click on the Check passwords link.

After performing the check, Password Checkup will display the different categories that your passwords are at risk from. These are compromised passwords, reused passwords, and weak passwords as shown below.
Click to expand...

guest · Feb 13, 2020

Google brings Password Checkup feature to Chrome Settings
February 12, 2020
https://techdows.com/2020/02/google-brings-password-checkup-feature-to-chrome-settings.html

Google Chrome browser lets you run a password checkup for all the passwords saved to your Google Account from Password Manager available at password.google.com. Google is now also looking to make it possible to scan passwords for security issues from Chrome browser Settings as well.

Now your passwords can also be analyzed at chrome://settings/passwords page if you enable “Bulk password check” flag in Chrome 82 Canary. The flag when turned on enables “the Bulk password Check feature for signed-in users” -Mac, Windows, Linux, and Chrome OS.

If you relaunch Chrome and visit chrome://settings/passwords page, you’ll notice a new “Check Passwords” section with the message: “keep your passwords safe from data breaches and other security issues”, clicking it will show Check Passwords option.
As of now, the feature isn’t active enough to work like at Password Manager, expect it to function soon as the feature development progresses.
Click to expand...

guest · Jun 23, 2020

Google is on a mission to stop you from reusing passwords
It’s adding its Password Checkup tool to the Security Checkup dashboard
June 23, 2020
https://www.theverge.com/2020/6/23/21299007/google-password-checkup-security

“Passwords are one of the worst things on the internet,” Mark Risher, Google’s senior director for account security, identity, and abuse told The Verge. Though they’re essential for security and to help people log in to many apps and websites, “they’re one of the primary, if not the primary, ways that people actually end up getting compromised.”

It’s a strange thing for a Google security executive to say because the last time you logged into Gmail, you probably typed in a password. But the company has been trying to nudge users away from the model for years, or at least minimize the damage.
If that reused password gets leaked as part of a data breach, hackers could then have the key to many of your other online accounts — no matter how complex the phrase is.
Click to expand...

But over the past year or so, Google has also been working to help people proactively make better passwords with Password Checkup. The tool checks logins against a database of 4 billion leaked credentials, seeing if the password you’re typing in matches one that’s already leaked. It launched first as a Chrome extension in February 2019, and Google baked it into Google Accounts in October and into Chrome in December.
It’s not a new idea, but Google is uniquely well-positioned to offer something like Password Checkup.

To do so, Google stores a hashed and encrypted version of every known username and password exposed by a data breach. Whenever you log into an account, Google will send a hashed and encrypted version of your login info against that database.
Click to expand...

But Google has an advantage in helping people with their passwords thanks to its massive scale. And tools like Password Checkup and the built-in password manager ladder up to a broader goal to make online security easier for users.
Click to expand...

guest · Jul 30, 2020

Google sunsetting Password Checkup extension now that it’s integrated with Chrome
July 30, 2020
https://9to5google.com/2020/07/30/password-checkup-chrome-extension/

Early in 2019, Google introduced Password Checkup to warn of breached third-party logins. Originally a Chrome extension, the tool was integrated into its online password manager and later the browser itself. Next month, Google will sunset the dedicated Password Checkup Chrome extension.

With that integration, Google recently issued a “Sunset announcement” for existing extension users:

Now that Password Checkup is integrated into Chrome, we will be sunsetting the Password Checkup extension on August 31, 2020. After this date, the Password Checkup extension will be disabled and no longer report whether a username or password has been in a data breach. In order to continue receiving warnings, users should instead sign-in to Chrome. Users must also ensure that Chrome is up to date and that the Chrome security setting ‘Warn you if passwords are exposed in a data breach’ is enabled (default unless previously changed).
Google last year said that the extension had been downloaded over a million times.
Click to expand...

Log in or Sign up

Password Checkup: Google launches new tool to help protect your accounts

guest Guest

Gandalf_The_Grey Registered Member

Floyd 57 Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Password Checkup: Google launches new tool to help protect your accounts

guest Guest

Gandalf_The_Grey Registered Member

Floyd 57 Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches