Google launches Password Checkup Chrome extension

[HEXUS]

And 'Cross Account Protection' includes new protections for apps using Google Sign In.

Read more.

[DerbyDave]

yes please Google. have all of my passwords. thanks x

[Lost4words]

Lol, i dont think so

[spacein_vader]

You can do the same thing with HaveIBeenPwned.com or any of the password managers that can connect to its API without having to trust Google.

[Saracen999]

I hwve exactly the same sentiment as expressed above.

It's why I don't use any password manager (that isn't on an air-gapped system) - it's down to trust. Even with sites I relatively trust, I'm still sceptical and Google? No, just no. Hell, no. Not in this life or the next.

[raygdunn]

You can do the same thing with HaveIBeenPwned.com or any of the password managers that can connect to its API without having to trust Google.

I agree. HaveIBeenPwned.com is a very useful site.
My login and password has been flagged as stolen from half a dozen sites and results in the odd unfriendly and misleading email quoting one of the password. (No you don't actually have control of my email account) They are quite old and mostly throw away ones fortunately.

I do use a password manager. (I don't trust the built in browser ones.) It allows easy generation of unique passwords. The only way I'll remember enough passwords! Though maybe the old pen and paper list would be most secure...

[Saracen999]

.... Though maybe the old pen and paper list would be most secure...

In some ways, sure. But not in others.

For instance, a list is only really useful if kept up to date. And if you don't lose it. And as long as someone else (family, friend, co-worker, whatever) can't get access to it. Of course, some of that depends on who you trust, and how much, and who may have physical access.

And, of course, you have to manually manage backups, e.g. photocopies in a safe place.

But you're right, certainly, that it's secure from remote threats, whichvis where a large portion on any threat surface comes from.

Me? I kinda go hybrid. I do use a password manager, but ONLY on a machine that has no internet connectivity, no wireless links at all (i.e. no hardware), and is on an encrypted drive. Backups are local and off-site, in water and fire-proof safes. And I keep a basic list on non-important passwords physically convenient, but locked away.

As always, this question is always a balance of risk versus convenience, and the best solutions are those designed for individual user's needs and circumstances. There is no "one size fits all" solution.