How to Secure Your Accounts After the Massive 'Collection #1' Password Breach

Originally posted on Lifehacker.com on January 17, 2019

“Another day, another migraine” is a wonderful morning mantra from Spongebob’s Squidward Q. Tentacles, which you can also apply to your account security on a near-weekly basis. It feels like there is always some new data breach or unfortunate leak you have to deal with, and today’s exercise is the big one. The biggest one, actually: 1,160,253,228 combinations of emails and passwords, affecting 773 million unique email addresses in total.

To put that in perspective, security researcher Troy Hunt calls this “the single largest breach ever to be loaded” into his helpful website Have I Been Pwned. And odds are good that you have, indeed, been pwned. Perhaps even pwned a few times, depending on how many times your various accounts appear in this huge “Collection #1” data breach—a big combination of lots of other data breaches going as far back as 2008 (potentially).

Continue reading here