Notification suggesting password change

[BlackDragon98]

I just got a notification that my password isn't unique and it suggested that I change it. I was also logged out of my account when I was logged in last night.

Has my account been compromised or something?

 

[LurkingInTheDeceit]

Has my account been compromised or something?

Click to shrink...

Not that I can see; we'd have Muted you if you'd posted anything spammy. Not sure if anything was done on the backend to flag common passwords and log out those who possess them, as there has been a lot of compromised accounts lately.

 

[BlackDragon98]

Not that I can see; we'd have Muted you if you'd posted anything spammy. Not sure if anything was done on the backend to flag common passwords and log out those who possess them, as there has been a lot of compromised accounts lately.

Click to shrink...

I checked my profile and everything is fine. But the notification was quite concerning. I wish I took a screenshot of it before I clicked it because now its permanently gone. And yes I did change my password just in case.

Well, that sounds ominous.

 

[ultima333]

I just got a notification that my password isn't unique and it suggested that I change it. I was also logged out of my account when I was logged in last night.

Has my account been compromised or something?

Click to shrink...

Xenforo has an add-on for password security that checks password hashes from our database against known comrpomised passwords lists such as from HaveIBeenPwned.com - this is checked on login.

No password is ever transmitted (the system outright doesn't even store plaintext passwords)
No full password hash is ever transmitted to the outside
The system sends HIBP a very incomplete password hash, HIBP sends back a list of thousands of hashes of known compromised passwords that fit, then the system

SB and SV both implement the same system (it's something Xon made)

 

[LurkingInTheDeceit]

You were probably surprised by this because you don't usually log out, but you were last night for some unrelated reason, and so got the notification you'd get every time you logged in with that password.

Well, that sounds ominous.

Click to shrink...

By 'a lot', I count 19 in the past week; not sure whether that's high or low in relative terms, but it certainly feels like a lot when you have to deal with them.

Edit: Now 20.