{
  "id": 18739124,
  "title": "How iOS can warn you when one of your passwords shows up in a data leak",
  "url": "https://urgent.news/2026/11/07/how-ios-can-warn-you-when-one-of-your-passwords-shows-up-in-a-data",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-07T15:15:00.000Z",
  "source": {
    "name": "Engadget",
    "slug": "engadget",
    "url": "https://www.engadget.com/2305444/how-ios-warn-password-shows-up-data-leak/"
  },
  "original_language": "en",
  "account": "Apple's iOS devices can alert users when a saved password may have appeared in a data leak. This warning doesn't necessarily indicate a hack, but it prompts users to review their accounts for potential compromise. The comparison is made between the passwords stored in the Passwords app and leaked password data, even if the website hasn't reported a breach. The warning serves as a prompt for users to check their accounts and update any potentially compromised passwords.\n\nThe Passwords app, introduced in iOS 18, offers a secure space for storing logins and passkeys, which can be synced via iCloud Keychain with end-to-end encryption. While Apple doesn't have a native iCloud Passwords app for Android or Windows, users can access it through Chrome or Edge after setting up iCloud for Windows and the browser extension.\n\nApple's password checks involve a local list of commonly leaked passwords and privacy-preserving cryptographic checks with Apple's servers. The server receives information derived from the password, not the password itself, ensuring user privacy. Apple doesn't retain this information. The warning doesn't specify the source of the leak, so if the same password is used across multiple accounts, there could be an increased risk of compromise.\n\nTo manage these alerts, users can open the Passwords app, authenticate with Face ID, Touch ID, or their passcode, and follow the provided steps. It's crucial to remember that changing the password stored in the app doesn't automatically change the account password. Users must update the password on the website first, then update the saved credentials in the Passwords app. Reusing passwords across multiple accounts, especially for sensitive accounts like email and banking, increases the risk of compromise. In such cases, it's essential to change the password everywhere and consider using passkeys and two-factor authentication for enhanced security. If an email or pop-up message claims a password leak, it's best to ignore it and check the Passwords app directly to avoid falling for phishing attempts.",
  "summary": "You'll be warned if your credentials stored in Apple Passwords are weak or compromised so you can take appropriate action.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}