What to Do If Your Browser Says a Password Was Compromised

Step by Step

1. Use the official settings or website for the account, device, browser, or service involved.
2. Change that account's password to a new unique one and change any other account where you reused the same password.
3. Review security and recovery settings after making the change.
4. Keep recovery information and backups somewhere you can access if the primary device is lost.

If That Doesn't Work

• Never give an unsolicited caller or message sender your password, recovery code, or one-time verification code.
• If money or a critical account is at risk, use a known official contact method rather than contact information supplied in the suspicious message.