Why do I not recognise some of these passwords Truyu has found?

You may not recognise your password because it was stored in a scrambled (hashed) format before it was leaked, and we’ve found the hashed version. Hashing is when websites scramble your password in a one-way algorithm, and is a security measure many websites take so that they don’t see your actual password. Even so, a leaked hashed password can still be risky. Criminals can spot patterns by comparing hashes of common passwords and try to access your accounts.

Another reason you may not recognise your password is that your email address may have been used by someone else to create an account that was then leaked online. Since we use your email address to find any matches of email and password combinations from sources on the dark web, any passwords associated to your email address will be found, even if it wasn’t you who created the email and password combination.

If you see any leaked passwords, you should follow our recommendations in the app.