Apple Intelligence is now available on iPhone, iPad, and Mac!

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Password has appeared in data leak


Hi


This is a general question because I'm trying to document something. Not a specific issue I'm having so the above image is from a search.


If I'm understanding correctly (can't find documentation)

The above message is saying that the password has appeared in a third-party data leak at another website. It's not actually saying that Nintendo and Upwork have had a leak. It's just pointing out that you've used the password it knows is leaked from elsewhere - as your Nintendo and upWork login?


...OR am I completely wrong and apple are saying they know there's been a data leak at Nintendo and upWork?


iPhone 11

Posted on Feb 11, 2021 1:26 PM

Reply
Question marked as Top-ranking reply

Posted on Feb 12, 2021 9:51 AM

Thanks for the replies. I reached out to Apple Support on Twitter and received this reply.

We’re happy to help clarify. The message is saying that the password was in a known data leak, not that the leak was from Nintendo specifically. Our Apple Support page has more details at the bottom: https://s.apple.com/dE5b0Z7R0t

We certainly welcome your feedback for this on our Apple Support page, here: http://apple.co/Feedback We appreciate you
14 replies
Question marked as Top-ranking reply

Feb 12, 2021 9:51 AM in response to strike7

Thanks for the replies. I reached out to Apple Support on Twitter and received this reply.

We’re happy to help clarify. The message is saying that the password was in a known data leak, not that the leak was from Nintendo specifically. Our Apple Support page has more details at the bottom: https://s.apple.com/dE5b0Z7R0t

We certainly welcome your feedback for this on our Apple Support page, here: http://apple.co/Feedback We appreciate you

Feb 11, 2021 1:34 PM in response to strike7

There are researchers who search the web for passwords that the bad guys have leaked and are selling. “pwned”

So either

  • yes Nintendo leaked your details or
  • You used the same password on another site that leaked or
  • You used a commonly used password that was leaked by a third party

In any event, change it!


Feb 11, 2021 1:59 PM in response to LD150

Thanks. But that doesn't answer my question.


As I mentioned, this isn't a specific issue I'm having, I want to understand what exactly Apple are saying with this message - sorry if I wasn't clear.


I want to know if I'm correct in thinking that the sites Apple are mentioning have not had a data breach. They're informing about you using known leaked passwords on sites (in this case Nintendo and Upwork).


OR


Are they implying that Nintento and Upwork have had a data leak.


It's not the clearest of messages - and it's very confusing if you own one of the sites listed if your members think Apple are saying you've had a data leak.

Feb 12, 2021 4:34 AM in response to LD150

• Both or either
either
yes Nintendo leaked your details or...

I don't think Apple would be that vague. Even if I don't think their message it the screenshot is clear.

Apple wouldn't just vaguely accuse Nintendo and Upwork of having a Data leak. That's the kind of thing that gets you sued big-time.


I'm pretty sure the message is just trying to tell you that you've used a password that has been exposed in a data leak and you've re-used those passwords on Nintendo and Upwork.

Not that Nintendo and Upwork have had a data leak (though they well may have separately since many companies have - Just don't think that's what this particular message is trying to say.


Google's equivalent system is more clear about telling you what data leaks they are checking and that you are being told your password is unsafe because you are re-using one that was found in one of those leaks and not because there is a specific issue about the site where you are using the duplicate password.


Feb 12, 2021 10:10 AM in response to deggie

I don’t use the strong passwords, I’m not that smart to know how to remember or access them, and you can’t copy and paste them. I know there are a lot of pw’s I’ve reused and plan to change them, but when I set up new pw’s and get that immediately, it’s frustrating. Maybe if I can print all my accounts and pw’s fm settings, I could go through and change them all? That sounds pretty daunting🙄


Feb 12, 2021 10:38 AM in response to islandlady91

The whole idea of using iCloud Keychain is you don't have to remember what the password it, it will enter it for you when you go to that website. If you ever need for some reason to actually know the password you can always do an internet search or contact AppleCare to learn (again) how to retrieve them. Your other option would be to start using phrases rather than words and write them down in a password book (the Container Store sells them).

Feb 12, 2021 10:53 AM in response to islandlady91

islandlady91 wrote:

I don’t use the strong passwords, I’m not that smart to know how to remember or access them, and you can’t copy and paste them. I know there are a lot of pw’s I’ve reused and plan to change them, but when I set up new pw’s and get that immediately, it’s frustrating. Maybe if I can print all my accounts and pw’s fm settings, I could go through and change them all? That sounds pretty daunting🙄

You can copy and paste from iCloud Keychain. Go to settings, passwords and authenticate (screen lock passcode of touchID or FaceID). Tap on an entry, tap on the password and copy it to the clipboard to paste into the login screen where you need it.


With iOS 14 you can also use direct entry from Keychain or third party password managers like mSecure or 1Password. Just tap the login screen and select the source you want to use and it should auto fill the login ID and password.

Password has appeared in data leak

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.