Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud

10/2/2019
01:15 PM
50%
50%

Google's 'Password Checkup' Tool Tells You When Passwords Are Leaked

The feature will check the strength of saved passwords and alert users when they're compromised in a breach.

Google is building a "password checkup" tool into its account controls to improve password habits by telling people if their passwords are weak and when they have been compromised.

This marks an expansion of Google's Password Checkup browser extension, which has accumulated more than 1 million downloads and warned half of users to a compromised password since it was launched earlier this year. Password Checkup is available for the Google Web dashboard and Android devices; later this year, it will be built into the Chrome browser.  

Starting today, Google has embedded Password Checkup into its password manager (passwords.google.com), which stores passwords for users who save them in Google Chrome. Here, they can view the passwords stored in Chrome and check their strength and security. Password Checkup and the password manager are built into each person's Google account.

Password Checkup will inform users if their password has been compromised in a third-party breach, if passwords are reused across different websites, or if they should be strengthened.

Weak passwords continue to put people at risk. Today Google also published the findings from a password study conducted with the Harris Poll. Nearly one-quarter of US adults have used passwords including "abc123," "Password," "123456," "Iloveyou," "111111," "Qwerty," "Admin," "Welcome," or some variation. Nearly 60% have incorporated a name or birthday into a password. Researchers say 75% of respondents struggle to keep track of their passwords.

Read more details here.

Check out The Edge, Dark Reading's new section for features, threat data, and in-depth perspectives. Today's top story: "The Inestimable Values of an Attacker's Mindset & Alex Trebek."

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
7 Tips for Infosec Pros Considering A Lateral Career Move
Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2020
For Mismanaged SOCs, The Price Is Not Right
Kelly Sheridan, Staff Editor, Dark Reading,  1/22/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
IT 2020: A Look Ahead
Are you ready for the critical changes that will occur in 2020? We've compiled editor insights from the best of our network (Dark Reading, Data Center Knowledge, InformationWeek, ITPro Today and Network Computing) to deliver to you a look at the trends, technologies, and threats that are emerging in the coming year. Download it today!
Flash Poll
How Enterprises are Attacking the Cybersecurity Problem
How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-7994
PUBLISHED: 2020-01-26
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) label[libelle] parameter to the /htdocs/admin/dict.php?id=3 page; the (2) name[constname] parameter to the /htdocs/admin/const.php?mainmenu=home page; the ...
CVE-2020-7995
PUBLISHED: 2020-01-26
The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts.
CVE-2020-7996
PUBLISHED: 2020-01-26
htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header.
CVE-2020-7989
PUBLISHED: 2020-01-26
Adive Framework 2.0.8 has admin/user/add userUsername XSS.
CVE-2020-7990
PUBLISHED: 2020-01-26
Adive Framework 2.0.8 has admin/user/add userName XSS.