Following the revelation that a list containing millions of stolen usernames and passwords had appeared online, we tell you a few different ways to find out if your credentials were stolen in that—or any other—security breach

The first service we are going to look at is Have I Been Pwned. This service allows users to check if our email address has been stolen and included in any of the various lists of email and password information circulating online. Furthermore, their database is kept up to date and includes the emails and passwords which were stolen recently.

https://haveibeenpwned.com/

When it comes to choosing a new password we recommend another very useful tool on the same website.


Another important thing to keep in mind when choosing a secure password, besides checking if it appears in any database of stolen passwords, is to follow good practices.

Use a combination of alphanumeric characters
Use special characters
It should be at least 8 characters long (and more than 10 will give you even more security against a brute force attack)
In addition, consider using two-factor authentication, which adds a second layer of security on top of your chosen password.
But the most important thing is for it to be easy for us to remember, because if racking our brains to think of it results in us writing it down on a piece of paper or, even worse, sticking it to the bottom of the monitor—or indeed any of the other myriad solutions we have come across—then all the security measures we have used will prove to be worthless.

For users who use a password manager such as KeePass, which allows you to generate more secure combinations and store them encrypted within the password manager itself, there is the option to compare all the passwords you have stored in it against the Have I Been Pwned database, thanks to a tool published on GitHub.

The application is called kdbxpasswordpwned and it allows you to automatically compare all the passwords you have stored in KeePass versus the database of stolen passwords.

While the application is aimed at users with above-average technical knowledge, the following step-by-step instructions should help make it simpler to use.

First, install the application on your system (which must already have Python installed) by using the following command line:

$ pip install kdbxpasswordpwned

Once installed, go to the directory where your .kdbx file is located (.kdbx is the file format for the KeePass password manager) and run the following command:

Kdbxpasswordpwned passkeys.kdbx

Remember to change your passwords regularly, even if the applications and services you use don’t ask you to, and use two-factor authentication on the services that allow it. By doing so, you can keep your personal data more secure and reduce the chances of someone else gaining access to it.

source: http://gblworld.com/how-to-find-out-if-your-password-was-stolen-in-any-security-breach/

Enjoyed reading the article above, really explains everything in detail, the article is very interesting and effective. Thank you and good luck for the upcoming articles Python Online Training