Log InSign up
  1. Home
  2.  → Password Checkup by Google

Password Checkup by Google

A Chrome Extension to help resecure hacked accounts

Password Checkup helps you resecure accounts that were affected by data breaches.

Wherever you sign-in, if you enter a username and password that is no longer safe due to appearing in a data breach known to Google, you’ll receive an alert.

Google Launches New Chrome Extension to Alert Users of Hacked PasswordsLarge scale hacks of people's passwords and credentials are becoming increasingly common - just a few weeks back, a database of more than 773 million email addresses and passwords was leaked online, and made available to potentially ill-intentioned groups.
Reviews
Michelle Tackabery
Amin Afshar
 
View all 2 reviews → 
Helpful
  • Michelle Tackabery
    Michelle TackaberySr Content Marketing Specialist, Progr…
    Pros: 

    I have a few Chrome extensions that I consider vital because they just work. This looks like it could become one of them.

    Cons: 

    I agree that a website checker would be a good alternative, although that would seem to require you to give up PID.

    Having something in the browser that can check your passwords without actively logging in to sites seems like a great idea.

    Michelle Tackabery has used this product for one day.
    Comments (0)
  • Amin Afshar
    Amin AfsharFounder of Sidenote
    Pros: 

    Great idea to bring some peace of mind for security.

    Cons: 

    Does it really need to be an extension? I think a website would have been sufficient.

    Seems to work instantly. Not sure if this is a good or bad thing.

    Amin Afshar has used this product for one day.
    Comments (1)
Discussion
Hunter Carter
Hunter Carter
How does it work? Is it sniffing the password and sending to a server? Or is it all client side?
2 UpvotesShare
Tony Brix
Tony Brix
@school_4_ants skimming through the source code it looks like they check against a firebase database https://password-api-prod.fireba...
1 UpvoteShare
Tony Brix
Tony Brix
@school_4_ants According to Google they use "multiple rounds of hashing, k-anonymity, and private set intersection with blinding" to secure the username/password before sending them to a server. https://security.googleblog.com/...
1 UpvoteShare
Ayush Chandra
Ayush Chandra
Great job!! 😊 Great move by Google
UpvoteShare
Milos
Milos
Mui interestados
UpvoteShare
casey mahoney
casey mahoney
To early to tell. Give me a few days and I will have something concrete to say!
UpvoteShare