How to Check Whether Chrome Says One of Your Passwords Was Compromised

If Chrome or Google Password Manager warns you about a compromised password, take the warning seriously.

But understand what it means.

A compromised-password warning does not automatically mean someone has taken control of your computer.

It means a saved credential may have been exposed and should no longer be trusted.

Run Password Checkup on a computer

In Chrome:

1. Open Chrome. 2. Open the Chrome menu. 3. Select Passwords and autofill. 4. Open Google Password Manager. 5. Select Checkup.

Google Password Manager can identify saved passwords that may be exposed, weak, or reused across multiple accounts.

What should you do with an exposed password?

Change it at the actual account or website.

Do not merely delete the saved copy from Chrome and assume the problem is solved. Deleting a browser's saved copy does not change the password on the account itself.

Go directly to the legitimate website or app, sign in, and use its password-change feature.

Choose a new password that you are not using elsewhere.

If the account supports two-factor authentication, enable it. See How to Set Up Two-Factor Authentication on Any Account.

Reused passwords deserve attention too

Suppose you use the same password for your email, a shopping site, and another service.

If one service exposes that password, attackers may try the same credentials elsewhere.

That is why unique passwords matter.

A password manager can make unique passwords practical because you do not have to memorize every one.

Be careful with password-warning emails

A criminal can send an email claiming your password was exposed and provide a fake button that leads to a phishing page.

Instead of trusting a link in a frightening email, open Chrome or Google Password Manager yourself and check the warning there.

See How to Spot a Phishing Email Before It Tricks You.

The bottom line

If Google Password Manager identifies an exposed password: verify the warning in Password Checkup, go directly to the real account, change the password, make it unique, and enable two-factor authentication when available.

Sources and Further Reading

Google Account Help — Change compromised passwords in your Google Account Google Chrome Help — How Chrome protects your passwords