Massive Password Leak: Take Action Now
What happened?
A new investigation reports that around 16 billion login credentials (usernames and passwords) have surfaced online from multiple sources—big names like Apple, Google, Facebook, Instagram, plus other services including VPNs, developer tools, Telegram, and government platforms. Experts warn this isn’t just old data—it’s fresh, untapped, and could be used in phishing scams or account hijacks at scale.
Why this matters to you:
Your password—even if strong—could be among those leaked.
Criminals use stolen credentials to break into accounts, take over social media, shop online, or commit fraud.
What security experts recommend:
Change passwords on all major accounts now.
Use a unique password for each service.
Turn on two-factor authentication (2FA).
Switch to passkeys where possible (Google and Apple support them)—they’re safer than traditional passwords.
Consider using a password manager to keep everything organized and secure.
Easy Steps to Change Your Passwords
Google (Gmail, YouTube, etc.)
Go to myaccount.google.com.
Click Security → Password.
Enter your current password, then type a new one.
Finish with Change Password.
While there, enable 2-Step Verification under Security.
In Facebook (web or app), click the menu (down arrow or ☰).
Go to Settings & Privacy → Settings → Security and Login.
Under Change password, enter your current and new password.
Click Save Changes and turn on Two-Factor Authentication.
Open Instagram and go to your Profile, then tap ☰ → Settings → Security → Password.
Type your old and new passwords, then hit Save.
In Security, tap Two-Factor Authentication and follow the setup steps (SMS or authentication app).
Apple ID (iCloud, App Store, etc.)
On iPhone/iPad:
Open Settings → Your Name → Password & Security → Change Password.
Verify your device passcode, then set a new Apple ID password.
On Mac:
Go to System Settings → Your Name → Password & Security → Change Password.
Enter your account password, then choose a new one.
Also consider enabling two-factor authentication for Apple ID under the same menu.
Tips for Choosing Strong Passwords
Use long, unique phrases—avoid reused or simple ones like “123456.”
Mix uppercase, lowercase, numbers, and symbols.
Avoid details easy to guess (birthdays, pet names).
Never reuse passwords across sites.
A password manager (like LastPass or Bitwarden) helps generate and store them securely.
What If You Didn’t Click Any Strange Links?
Some password leaks come from malware on users’ computers—not necessarily from clicking shady links. That underlying risk means changing your passwords and enabling 2FA still matters.
Final Word
This huge leak affecting 16 billion credentials is a wake-up call. You might not know if your passwords were exposed, so the best defense is to act now:
Change passwords on major accounts (Google, Facebook, Instagram, Apple).
Turn on 2FA everywhere you can.
Use a password manager.
Consider passkeys for extra security.