[Blog](/blog) Show links Resources [Blog](/blog) [Breaches](/breaches) [eBooks, reports, & more](/resources) [Events](/events) [News](/news) [Cybersecurity](/category/cybersecurity) Show links Categories [Attack Surface Management](/category/attack-surface-management) [Company News](/category/company-news) [Compliance and Regulations](/category/compliance-and-regulations) [Cybersecurity](/category/cybersecurity) [Data Breaches](/category/data-breaches) [DevOps](/category/devops) [Human Cyber Risk](/category/human-cyber-risk) [Risks and Vulnerabilities](/category/risks-and-vulnerabilities) [Third-Party Risk Management](/category/third-party-risk-management) [Vendor Risk Management](/category/vendor-risk-management) [Why Do I Get the Warning "A Data Breach on a Site or App Exposed Your Password" in Chrome?](/blog/chrome-data-breach-warning) Publish date November 19, 2024 {x} minute read # Why Do I Get the Warning "A Data Breach on a Site or App Exposed Your Password" in Chrome? [Get a demo](/contact-sales) [Free trial](/demo) [Download the PDF guide](/resources/complete-guide-to-data-breaches) [Free trial](/demo) Written by [Edward Kost](/team/edward-kost) Senior Cybersecurity Writer Edward is a cyber writer with a mechanical engineering background. His work has been referenced by academic institutions and government bodies. Reviewed by [Phil Ross](/team/phil-ross) Chief Information Security Officer Phil is a Forrester Zero Trust Strategist leveraging decades of experience in enterprise cybersecurity architectures. Table of contents eBook A Complete Guide to Data Breaches Free resource ### A Complete Guide to Data Breaches Learn how to avoid a costly data breach with a comprehensive prevention strategy. [Download now](/resources/complete-guide-to-data-breaches) If you’re getting this warning message, there’s a high chance that your username, password (or both) were compromised in a data breach. Follow these steps to get your account secure again ASAP. ## Step 1: Don’t Click the Warning Link Cybercriminals commonly use fear-inducing tactics to trick users into handing over their sensitive account details. Ever encountered a rouge “virus alert” pop-up message on a website? Well, that’s likely a scam that will demand payment for removing a virus that was never detected. Instead of clicking on the warning link, [and potentially falling victim to a phishing scam](https://www.upguard.com/blog/phishing), you should manually check if your password was compromised by visiting your Google Password Manager page and clicking on “Go to Password Checkup.” You’ll need to be logged in to your Google Account for this to work. The safest method of accessing your Google Password Manager is by loading your Google account manually (you’ll need to be logged in to your Google Account for this to work). Open a new browser and search google password manager, then click on this result: > The web address associated with this result should be **passwords.google.com** The password checkup page that loads will reveal all of the saved passwords in your Google Account that have been compromised in a data breach.  If you see a message saying, *“You haven’t saved any passwords in your Google Account yet,”* the save password feature is NOT enabled, and the data breach message you received is likely a scam that should be ignored. *If you want to geek out on the mechanisms powering Google’s credential compromise detection engine,*[* see this infographic*](https://1.bp.blogspot.com/-1LAW-XXeJhc/XfA42ApKvtI/AAAAAAAABV4/m4EtG0kS3skzKTG7_jJ2XA5-tgAn_DZqwCNcBGAsYHQ/s1600/password_checkup_chrome_revised.png)*, or*[* read this paper*](https://storage.googleapis.com/pub-tools-public-publication-data/pdf/33bc2203e7bcb5c0abe289f7432e11563fb2a238.pdf)*.* > Important: Google can only detect compromised passwords if you’ve enabled the credential-saving feature in your Chrome browser. You’ll be able to confirm whether this feature is enabled when you’re on your[ Google Password Manager](https://passwords.google.com/) page. ## Step 2: Change all Compromised Passwords Click the drop-down in the compromised passwords list and immediately change all of your compromised passwords. When you click on *Change Password, *you will be sent to the website for that account. You will need to change your password by logging into each listed account. Google Chrome will then prompt you to update the new password. Once updated, click the *Check Remaining Passwords *button to be taken back to your compromised passwords list. Repeat this process until you have no more compromised Chrome passwords. ## Step 3: Update all Weak and Reused Passwords While you’re on this page, it’s a good idea to revise all the weak passwords being reused. Reusing passwords and using weak passwords puts you at a very high risk of being compromised by hackers. If your login credentials were involved in a[ past security breach](https://www.upguard.com/blog/biggest-data-breaches) and you unknowingly reused them, you are at risk of further compromise. Hackers could get access to all of the online services and solutions you use with those credentials, which could include your bank accounts. Weak passwords can easily be guessed with password-cracking software in[ brute force attacks](https://www.upguard.com/blog/brute-force-attack). The following graphic indicates the approximate time required for cybercriminals to crack passwords across varying character combinations and lengths. > **Note: **These estimates do not factor in account access control to mitigate brute force attacks, such as MFA, timed lockouts, and exponentially increasing wait times. As such, they should only be used as a guide. ‍ ## What Steps Can I Take to Secure My Passwords? Better password protection habits will minimize the impact of password breaches. Follow these best practices to ensure a safe browsing experience. ### 1. Only Generate Passwords with a Password Management Solution Theoretically, the longer and more diverse your password is, the harder it is to crack. But if you’re coming up with your own passwords, you’ll likely follow a character pattern to make them memorable, and any pattern can easily be cracked with advanced hacking techniques like [brute force attacks](https://www.upguard.com/blog/brute-force-attack). #### Should I use an Online Password Generator? Online password generators are a terrible idea because you still need to store them securely - and no, saving your passwords in a note on your iPhone is not a secure storage option. Instead, you should use a password management solution. Password management solutions generate unique complex passwords and store them inside a secure vault that can be accessed from an iOS or Android app or a web browser. These solutions are designed never to generate the same password twice. They’re also super easy to use; whenever you need to access your credentials, simply log into the password manager, copy each concealed credential to your clipboard, and paste them into the login fields. A great password management solution to consider is[ 1Password](https://1password.com/). ### 2. Enable Two-Factor Authentication You may roll your eyes, but two-factor authentication is one of the most effective methods of preventing automated cyberattacks. According to Google, two-factor authentication (also known as 2FA)[ could block up to 100%](https://thenextweb.com/news/google-data-shows-2-factor-authentication-blocks-100-of-automated-bot-hacks) of automated bot attacks. [Learn more about 2FA.](https://www.upguard.com/blog/two-factor-authentication) Most online solutions (at least the ones worth trusting) have two-factor or even multi-factor authentication capabilities, so make sure you get this beautiful feature enabled! [Learn about the differences between 2FA and MFA.](https://www.upguard.com/blog/difference-between-2fa-and-mfa) Though Multi-Factor Authentication is a very effective method for securing your accounts, clever hackers could still circumvent this security control. To increase the efficacy of MFA, implement controls addressing all of the security feature’s potential loopholes. To protect your business from suffering a data breach, [download this free data breach prevention guide](https://www.upguard.com/resources/complete-guide-to-data-breaches). eBook A Complete Guide to Data Breaches Free resource ### A Complete Guide to Data Breaches Learn how to avoid a costly data breach with a comprehensive prevention strategy. [Download now](/resources/complete-guide-to-data-breaches) ## Related posts Learn more about the latest issues in cybersecurity. Cybersecurity #### [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026) A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news. [](/team/revashni-moodley) [Revashni Moodley](#) October 14, 2026 Cybersecurity #### [Left Unsupervised: 10 Times Access Outlived Its Authorization](/blog/10-times-access-outlived-authorization) Access granted once shouldn’t mean access forever. Read more on how unmonitored access caused 10 of these real-life breaches and what they taught us. [](/team/revashni-moodley) [Revashni Moodley](#) August 25, 2026 Cybersecurity #### [Surviving a LockBit Ransomware Attack: The ROI of Visibility](/blog/surviving-a-lockbit-ransomware-attack) Read how veteran CISO Nick Gicinto saved his alma mater from a LockBit ransomware attack by discarding the standard playbook. [](/team/nicholas-sollitto) [Nicholas Sollitto](#) June 1, 2026 Cybersecurity #### [Top 10 Security Events of 2025](/blog/top-security-events-of-2025) Recap the ten most impactful events that reshaped the cybersecurity industry this year and the critical lessons each had to teach us. Read more here. [](/team/revashni-moodley) [Revashni Moodley](#) October 14, 2026 Cybersecurity #### [Risk Automations: The Shift From Catch-Up to Command](/blog/risk-automations-shift-catch-up-to-command) Connect intelligence to system execution with Risk Automations, your new resolution layer for risk. Reduce remediation from hours to seconds - read more. [](/team/revashni-moodley) [Revashni Moodley](#) December 1, 2025 Cybersecurity #### [Shai-Hulud's True Lesson for CISOs: A Crisis of Communication](/blog/shai-hulud-lesson-for-cisos) Shai-Hulud was driven by a communication crisis between security and engineering. Get a CISO's perspective on how to finally bridge this gap. [](/team/phil-ross) [Phil Ross](#) September 3, 2026 [All posts](/blog) Experience superior visibility and a simpler approach to cyber risk management [Get a demo](/contact-sales) [Free trial](/demo)