How to Check If Your Passwords Have Been Breached

Data breaches at other companies happen constantly, and if you've ever reused a password across multiple sites, a breach at one of them can put your other accounts at risk too. Free services exist that let you check whether your email address has appeared in a known breach.

If you find that an account has been exposed, change that password immediately, and change it anywhere else you reused it — which is itself a good reason to avoid reusing passwords in the first place. A password manager makes using unique, strong passwords for every account far more practical.

For business accounts specifically, this is also a good prompt to confirm MFA is enabled, since a breached password alone shouldn't be enough to get an attacker into an account that's properly protected.