Apple Password Manager Finds Compromised Passwords but Google Password Manager Doesn't

Steve C · 2026-10-19T02:56:07-0400

I let Google and Apple password managers store less important passwords. The passwords stored are the same. Apple password manager reports some passwords have been revealed in a data breach and recommends they be changed immediately whereas the Gogole password manager reports no issues. Why the difference in reporting?

Banjoman301 · 2026-10-19T03:05:35-0400

Different algorithms, likely.

Banjoman301 · 2026-10-19T03:20:15-0400

Get a third opinion...

Have I Been Pwned: Pwned Passwords

Pwned Passwords is a huge corpus of previously breached passwords made freely available to help services block them from being used again.

haveibeenpwned.com

Steve C · 2026-10-19T03:27:43-0400

Banjoman301 said:
Get a third opinion...

Have I Been Pwned: Pwned Passwords

Pwned Passwords is a huge corpus of previously breached passwords made freely available to help services block them from being used again.

haveibeenpwned.com

That only detects one of the passwords but takes no account of the login email address

Banjoman301 · 2026-10-19T03:30:04-0400

You can check email addresses here...

Have I Been Pwned: Check if your email address has been exposed in a data breach

Search tens of billions of breached records, monitor corporate domains via API, and get alerted when credentials are exposed. Trusted by security teams, MSSPs, and government agencies worldwide.

haveibeenpwned.com

Steve C · 2026-10-19T03:31:32-0400

Banjoman301 said:
You can check email addresses here...

Have I Been Pwned: Check if your email address has been exposed in a data breach

Search tens of billions of breached records, monitor corporate domains via API, and get alerted when credentials are exposed. Trusted by security teams, MSSPs, and government agencies worldwide.

haveibeenpwned.com

Yes, but you can't check a given email address and password together.

Banjoman301 · 2026-10-19T03:35:33-0400

Personally, I would not give out an email address and a password...it's a security risk.

Probably why they don't do it.

echo2446 · 2026-10-19T04:03:35-0400

Steve C said:
Why the difference in reporting?

Different sources and lists—it’s not surprising. Sometimes Google even gives false positives because of bugs in its software.

If you use a password manager, use randomly generated, unique, long passwords or passphrases for every site. Then there’s less reason to worry about data breaches because 1) the service will usually notify you, 2) your long password’s hash is usually not crackable (and will not be breached) if the service uses standard password hashing, and 3) your unique password will pinpoint the affected account. You can also use unique email aliases; a leaked alias will pinpoint the account as well.

Apple Password Manager Finds Compromised Passwords but Google Password Manager Doesn't

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer