haveibeenpwned

[JustHaveFun]

I suggest everyone check out https://haveibeenpwned.com they will show you if your email address has been compromised and what site it happened with. You might have your personal out there on pastebin or for sale on darknet market.

I suggest using a password manager to store unique, randomly generate, high entropy passwords for your logins. They are stored encrypted on your hard drive and only stored in RAM when in use, that way they aren't cached uncryped in virtual memory. They also prevent keylogging by remote attackers. You should should not use a browser based password manager because you can be attacked remotely and have your keystrokes logged and your display screenshotted. Also, you shouldn't store your password in your browser when a site asks you to save your password. You should never use the same password for multiple accounts, that way if your password is stolen it can't be used to gain access to your other logins.

I reccommend keepass for Windows users and the port of it, keepassx for linux, available in all repos. They have detailed information there.

https://keepass.info/ https://keepass.info/help/base/faq_tech.html

https://www.keepassx.org/

[bouldghirl]

So you put your email address in, it tells you yes your address features on x sites and please buy our Password protector for more information. Good marketing (and potentially a good way of harvesting email addresses) or am I just being cynical?

[cinderfella]

I dont think they harvest your e-mail. I have been using this for a few years hence why I changed user names more recently (got hit by a Yahoo leak a dropbox leak nowhere is safe etc). It doesn't actually do anything with your e-mail address it just cross references it to the published list by the hackers and data sellers. putting your e-mail is like doing a control f on an app or in Excel for example with the sources being the ones I mentioned above.

Best also keep multiple addresses for different purposes just in case a message board get harvested of data.

In short, don't put you digital eggs in one digital basket and this list helps you decide how to do so.

[JustHaveFun]

So you put your email address in, it tells you yes your address features on x sites and please buy our Password protector for more information. Good marketing (and potentially a good way of harvesting email addresses) or am I just being cynical?

NO! You are being very cynical! It is a free service that he offers, any time that there has been a data breech (a website that gets hacked and has user information leaked) then he adds it to his database. He is not selling anything! The two websites are not linked to eachother at all, the managers I suggested and the email compromised service are completely free! They are there for your security. I would never try to sell shit on here lol, I was trying to help people out! You can even scan your friends and family email addresses to see if they have been compromised too. They do not sell your email address or give it out to anyone.

Check out the wikipedia page to learn more

https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F

https://en.wikipedia.org/wiki/KeePass

[Uniquemind]

NO! You are being very cynical! It is a free service that he offers, any time that there has been a data breech (a website that gets hacked and has user information leaked) then he adds it to his database. He is not selling anything! The two websites are not linked to eachother at all, the managers I suggested and the email compromised service are completely free! They are there for your security. I would never try to sell shit on here lol, I was trying to help people out! You can even scan your friends and family email addresses to see if they have been compromised too. They do not sell your email address or give it out to anyone.

Check out the wikipedia page to learn more

https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F

https://en.wikipedia.org/wiki/KeePass


I appreciate it! I'll show it to friends irl too.

[Croconaw]

It says my email has been breached four times. Is that bad? I’m a real noob at technology.

[JustHaveFun]

It says my email has been breached four times. Is that bad? I’m a real noob at technology.

Yes, that is not good. Do you use the same password for all of your accounts? If so, whatever password you used on your email address that is associated with your other logins can be accessed using the same password! You need to have a unique password for each online account you have, that way you can minimize the potential damage done to you which is why I also recommended using a password manager in my original post, with a password manager you can create a unique, strong password for each online account you have very easily and increase your security dramatically.