Your passwords have appeared in a data leak

Certainly interesting (troubling) that this is occurring with complex, machine-generated passwords … 🤔

FWIW, these two articles explain how it is supposed to work:

Password security recommendations – Apple Support (AU)

Password Monitoring – Apple Support (AU)

All very good points.

NOT using one’s e-mail as a username is one added defensive layer.

For those websites that ONLY use e-mail as the username, creation of an “expendable” alias (masking your true email) is another “layered defense” option; although too few e-mail providers make this even possible, much less easy.

jenkweb wrote:

All of my passwords stored in safari have always displayed that they have been in a data leak since the feature was added. I change them, the warning comes back a day or two later.

So Google passwords are always saying they have been leaked on the iphone. Google denies there was any data leak, Apple says my Google data is compromised and has appeared in a leak.

Who is telling the truth? Why do several password changes never clear the warning that its been leaked?

Means that password you're using has already been guessed or isn't strong enough for a lack of better term. Are you using 8 to 16 character with numbers, symbol, lower and upper case?