Raise your hand if you have used Have I Been Pwned to spot yourself in an online breach. Raise your other hand with me if you’ve actually spotted your email or password there at least once
.
With every single service requiring you to enter your email or phone number to authenticate yourself, we have all been in a situation where our credentials have leaked — I can bet more than once. While we place disproportionate weight on unique passwords, they make up only a third of your digital security stack.