Google security alert...

[klayton88]

I've just had a notification and and email from Google to say a password has been compromised and to change it immediately. It's only compromised on redcafe it tells me... Anybody in the same boat?

 

[Hugh Jass]

I havent been pwned.

 

[Niall]

Can you PM me a screenshot of what the email says?

 

[SalfordRed18]

I've just had a notification and and email from Google to say a password has been compromised and to change it immediately. It's only compromised on redcafe it tells me... Anybody in the same boat?

Send me your password and username details and I'll have a look for you.

 

[Redplane]

I've just had a notification and and email from Google to say a password has been compromised and to change it immediately. It's only compromised on redcafe it tells me... Anybody in the same boat?

Usually just means it's compromised on the dark web somewhere but unless your PM box contains nude pictures of @Raoul I wouldn't worry about it too much.

At this point just expect just about any username and PW you have will be compromised at some pt. Only ones ill immediately change are cases where my pw or username matches those used on multiple sites, or links to a site of app that does contain sensitive information. In general though its not a bad idea to use MFA for anything confidential etc like financials, email account. I also have Google's PW manager create completely random passwords for me now so it's extremely hard to guess yet I don't have to remember it.

 

[Wibble]

Change your password for here to something unique and secure now just in case.

If the message is legit it probably means that you have used the same email/password combination elsewhere and that place has been compromised (not the Caf).

You can check if your email has been compromised here - one of the likely many sites on the list will probably be where you used the same password as on the Caf https://haveibeenpwned.com/

Follow the instructions below to make sure the message from Google is legit and never just follow a link in a message.

https://support.google.com/accounts/answer/9457609?hl=en#:~:text=To help you secure your,and change any unsafe passwords.

 

[klayton88]

Send me your password and username details and I'll have a look for you.

I've gone ahead and changed it now but it was an official email from Google as well as the notification.

 

[klayton88]

Can you PM me a screenshot of what the email says?

I've gone ahead and changed it now but it was an official email from Google as well as the notification.

 

[klayton88]

Usually just means it's compromised on the dark web somewhere but unless your PM box contains nude pictures of @Raoul I wouldn't worry about it too much.

At this point just expect just about any username and PW you have will be compromised at some pt. Only ones ill immediately change are cases where my pw or username matches those used on multiple sites, or links to a site of app that does contain sensitive information. In general though its not a bad idea to use MFA for anything confidential etc like financials, email account. I also have Google's PW manager create completely random passwords for me now so it's extremely hard to guess yet I don't have to remember it.

I've also started opting for the random ones Google sets for you across my various accounts, gone are the days where an uppercase and a number were sufficient! There's about five different criteria for modern passwords.

 

[bringbackbebe]

1. You've used a simple password which has been matched and found with list of leaked passwords (most likely)
2. You've been phished (less likely)
3. Redcafe has been compromised (very unlikely)

Just use a password manager in the future. In 2024, it's almost a crime to not use one.