{"id":119602,"date":"2017-08-06T15:00:44","date_gmt":"2017-08-06T13:00:44","guid":{"rendered":"https:\/\/mygaming.co.za\/news\/?p=119602"},"modified":"2017-08-05T11:35:02","modified_gmt":"2017-08-05T09:35:02","slug":"check-if-your-password-has-been-compromised","status":"publish","type":"post","link":"https:\/\/mygaming.co.za\/news\/features\/119602-check-if-your-password-has-been-compromised","title":{"rendered":"Check if your password has been compromised"},"content":{"rendered":"<p>If you\u2019re creating a new password online, you can now see if it has been compromised in a data breach.<\/p>\n<p>Troy Hunt, creator of data breach repository\u00a0<a href=\"https:\/\/haveibeenpwned.com\/\" target=\"_blank\" rel=\"noopener\"><strong>Have I Been Pwned<\/strong><\/a>, has released a database of over 306 million passwords contained in multiple data breaches.<\/p>\n<p>Previously, the Have I Been Pwned website allowed visitors to enter their email address to check if one of their accounts had been compromised by hackers in a data breach.<\/p>\n<p>Hunt has now added a dedicated\u00a0<a href=\"https:\/\/haveibeenpwned.com\/Passwords\" target=\"_blank\" rel=\"noopener\"><strong>Passwords page<\/strong><\/a>\u00a0to the website, which allows users to check a password against a database of 306 million passwords.<\/p>\n<p>The passwords contained in the list were compromised in various data breaches, making them accessible to hackers and other attackers.<\/p>\n<h3 class=\"my-4\">Checking a new password<\/h3>\n<p>While users may be tempted to enter their current passwords into the Have I Been Pwned website, Hunt warns visitors not to enter active passwords into any third-party service.<\/p>\n<p>\u201cIt goes without saying, but don\u2019t enter a password you currently use into any third-party service like this,\u201d said Hunt.<\/p>\n<p>\u201cI don\u2019t explicitly log them and I\u2019m a trustworthy guy, but yeah, don\u2019t.\u201d<\/p>\n<p>The Passwords page allows you to compare potential new passwords against the database of compromised keys to determine their security.<\/p>\n<p>Safely comparing your current passwords to the database can be done offline, but requires technical knowledge.<\/p>\n<p>Users can download a compressed database of the hashed passwords from Hunt\u2019s website courtesy of Cloudflare.<\/p>\n<p>Each password is provided as a SHA1 hash, meaning they are not visible to the public.<\/p>\n<p>Users can then use the\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/sql\/t-sql\/functions\/hashbytes-transact-sql\" target=\"_blank\" rel=\"noopener\"><strong>HASHBYTES function<\/strong><\/a>\u00a0to turn their query into an SHA1 hash, which is checked against other hashed entries in the database using an SQL query.<\/p>\n<h3 class=\"my-4\">Creating a secure password<\/h3>\n<p>Password security can be tricky, but password managers and security guidelines are available to help users stay safe.<\/p>\n<p>Password managers allow you to only remember a single, secure password, which is then used to access a stored database of randomly-generated keys for the sites you interact with.<\/p>\n<p>Whether you\u2019re choosing a master password for your password manager or a secure password for your account, it is important to keep a few guidelines in mind.<\/p>\n<p>According to\u00a0<a href=\"https:\/\/mybroadband.co.za\/news\/security\/217684-meet-one-of-south-africas-top-professional-hackers.html\" target=\"_blank\" rel=\"noopener\"><strong>BDO cybersecurity specialist Rudi Dicks<\/strong><\/a>, long passwords are important, as this exponentially increases the difficulty of hacking your password using brute force methods.<\/p>\n<p>\u201cSimply adding .co.za to the end of your password makes it far more secure, while remaining easy to remember,\u201d said Dicks.<\/p>\n<p>He added that users shouldn\u2019t use the same password across multiple websites, in case of a breach.<\/p>\n<p><em>This article first appeared on <strong><a href=\"https:\/\/mybroadband.co.za\/news\/security\/223188-how-to-check-if-your-password-is-secure.html\" target=\"_blank\" rel=\"noopener\">MyBroadband <\/a><\/strong>and is republished with permission.<\/em><\/p>\n<h4><strong>Now read:\u00a0<a href=\"https:\/\/mybroadband.co.za\/news\/security\/218008-how-to-stop-hackers-from-stealing-your-data.html\" rel=\"bookmark\">How to stop hackers from stealing your data<\/a><\/strong><\/h4>\n","protected":false},"excerpt":{"rendered":"<p>If you\u2019re creating a new password online, you can now see if it has been compromised in a data breach.<\/p>\n","protected":false},"author":232,"featured_media":93695,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[20],"tags":[405,11956],"class_list":["post-119602","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-features","tag-hacking","tag-password"],"_links":{"self":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/119602","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/users\/232"}],"replies":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/comments?post=119602"}],"version-history":[{"count":0,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/119602\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media\/93695"}],"wp:attachment":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media?parent=119602"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/categories?post=119602"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/tags?post=119602"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}