Live data from Hacker News

Should I Change My Password?

shouldichangemypassword.com

71–80 of 104 posts

Re: Should I Change My Password?

#71
post #67

Earlier quoted context omitted.

You don't get it. If your account shows up in their database, then they'll have your email + password + phone number + any other data you provided.

Huh? You don't need to give them anything except for your email address. They only look for your email address in the compromised databases.

Yes you do if you subscribe for notifications.

Re: Should I Change My Password?

#72
post #67

Earlier quoted context omitted.

You don't need to give them your password or phone number, just the email address associated with your account(s). Adding a phone number would be optional.

You don't get it. If your account shows up in their database, then they'll have your email + password + phone number + any other data you provided.

What he means is this: you subscribe by telling the site your email. Then, if they ever find your email in one of the publicly released documents, then they will notify you by email.

Re: Should I Change My Password?

#73
Terrible interface. I entered "password" and it told me "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites."

Why did I not enter an e-mail address like the light text in the input box says? Well, I let myself mislead by the header image.

Re: Should I Change My Password?

#76

Earlier quoted context omitted.

Huh? You don't need to give them anything except for your email address. They only look for your email address in the compromised databases.

Yes you do if you subscribe for notifications.

I still don't understand. Why?

Re: Should I Change My Password?

#77

It'd be cool if they added an option to subscribe for $10/year for a quick SMS and email notification if your account is compromised. I'd get it for myself and my family.

Yeah I'd probably buy it. And they'd get bought by Symantec or McAfee if the list gets big enough.

Re: Should I Change My Password?

#78
If you share your password across different sites: Yes - you should change it to a non-shared password. There are plenty of password managers that can store randomly generated passwords for you. And if you don't like that there's also PwdHash, although this is less secure as someone might be able to compromise your master password.

Re: Should I Change My Password?

#79
post #73

Terrible interface. I entered "password" and it told me "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites." Why did I not enter an e-mail address like the light text in the input box says? Well, I let myself mislead by the header image.

I enter "1234" and "123456" Both said my passwords are safe.

I think not!

Re: Should I Change My Password?

#80
post #73

Terrible interface. I entered "password" and it told me "It looks like your passwords may be safe. No instances of compromise are recorded in this database. However, it's good practice to change your critical passwords regularly and ensure they are not re-used across multiple sites." Why did I not enter an e-mail address like the light text in the input box says? Well, I let myself mislead by the header image.

You know it clearly says to enter your email address in the input field, right? Of course "password" hasn't shown up in the database…it's not an email address.
Post reply on HN