DEV Community

Discussion on: Make one resolution this year. Never write your own Authentication

Collapse
 
tiguchi profile image
Thomas Werner

Your passwords are already out there in the open, exposed through data dumps, shared on the Internet and used by crooks.

"Have I Been Pwned" only makes you aware of those leaks, meaning that you should not use those passwords anymore. The only thing you can do is replace those leaked passwords by new ones. Use a password manager for that and random generated passwords.

It's probably worthwhile reading their FAQ to better understand what the service is about, what data leaks are, and how their leak data is stored: haveibeenpwned.com/FAQs

Collapse
 
yoursunny profile image
Junxiao Shi

My password was in Top 5 DEV Comments of the week of 2020-Oct-29. It of course is out in the open.
dev.to/devteam/top-5-dev-comments-...

Thread Thread
 
tiguchi profile image
Thomas Werner

Good for you.