GoKawiilApple's Passwords app can alert iPhone users to compromised login credentials
Apple's built-in Passwords app checks saved logins against a local list of known leaked passwords and uses privacy-preserving cryptographic checks with its servers for others, without transmitting the actual password. The app also flags weak or reused passwords even if they haven't appeared in a known breach, though it doesn't reveal where a leak occurred.
GoKawiil's interpretation of the reporting above, not reported fact.
Because the alert doesn't identify the source of a leak, users reusing passwords across sites could face risk to more sensitive accounts without realizing which service was compromised. This feature puts Apple's security tooling in competition with Google Password Manager and third-party apps like 1Password, potentially reinforcing Apple's ecosystem lock-in for users already relying on iCloud Keychain.
- Apple's Passwords app cross-checks credentials against leaked password lists and flags weak or reused ones.
- Privacy-preserving cryptographic methods let Apple check passwords against leaks without seeing the actual password.
- The warning doesn't specify the breach source, so reused passwords across accounts remain a risk even after alerts.
YubiKey 5C NFC Security Key — If you're cleaning up leaked or reused passwords with Apple's Passwords app, pairing your accounts with a hardware security key like the YubiKey adds a strong second layer of protection. It supports passkeys and FIDO2 authentication, making it a natural complement to the passwordless future Apple is pushing toward. It's a small investment for significantly tougher account security.”}, oops} — 哈 ... 。 done.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: engadget.com — Husain Parvez, 2026-11-07
Published there as: “How iOS can warn you when one of your passwords shows up in a data leak”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.