Stop Using Your Password — 800 Million Stolen Passwords Listed Online

Update, April 19, 2025: This story, originally published April 18, has been updated with technical information regarding passkeys and their security advantages in light of the latest reports of compromised passwords being listed online. That passwords have reached their collective sell-by date is not new news. You only have to look at the growing threat from millions of devices infected by infostealer malware, threat actors employing automatic password hacking machines in attacks, and zero-day exploits specifically targeting Windows passwords, for proof of that. Here’s the thing, even with two-factor authentication added to the login credentials mix, you are still not safe. 2FA bypass attacks, employing attacker-in-the middle and session cookie stealing tactics, weaken even that defense. As if that all wasn’t worrying enough, I’m sorry to report that your password could already be compromised and available to hackers. Here’s what you need to know, why you need to act now, and what acti...