4 ms·
Do you guys specifically alert the user that the password has been exposed publicly? If I got that sort of message, I would be grateful to the website rather t
by jessriedel 7y ago
Do you guys specifically alert the user that the password has been exposed publicly? If I got that sort of message, I would be grateful to the website rather than annoyed I couldn't use my favorite password.
- zaroth 7y agoNot the password for you, just that password, for someone, on some site, ever. If that’s happened thousands of times, sure, that’s the sign of a relatively common/weak password. If it’s happened once? I’d be frustrated if I was trying to pick something memorable and got stuck because of that.
- jessriedel 7y agoYes, I understand it was whether it's exposed anywhere, not just for this user. If it was someone else's password, I would still find it super valuable information to know I'm using something that's common enough to have been used by a stranger.
- methodover 7y agoWe do yeah. Here's the text: "This password has previously appeared in a data breach. Please choose a more secure alternative."