Short answer: Password managers and browsers compare saved credentials with known breach data. The warning usually means the password appeared in a breach, not necessarily that your current device has malware.
This guide uses low-risk checks first, keeps account and personal data protected, and helps you identify whether the problem belongs to the device, app, network, or service.
What usually causes this problem
Change the exposed password on the real service, replace it anywhere else it was reused, and enable multi-factor authentication. Common causes include:
- The same password was reused across sites.
- An older service suffered a breach.
- The alert refers to a saved outdated login.
- A phishing site captured the password.
Change one thing at a time. If several settings are changed together, it becomes difficult to know which step actually solved the problem or created a new one.
Fix it in the safest order
- Open the affected site directly. Complete the check, then test the original symptom before moving to the next step.
- Create a unique long password. Complete the check, then test the original symptom before moving to the next step.
- Sign out other sessions. Complete the check, then test the original symptom before moving to the next step.
- Check recovery details. Complete the check, then test the original symptom before moving to the next step.
- Replace reused versions on other accounts. Complete the check, then test the original symptom before moving to the next step.
- Save the new password in a trusted manager. Complete the check, then test the original symptom before moving to the next step.
Protect your data while troubleshooting
Do not change passwords by following links in an unexpected warning email. Back up irreplaceable files before clearing storage, resetting settings, removing an account, reinstalling an app, or formatting a drive. Use official apps and support pages rather than download links sent through pop-ups, comments, or unexpected messages.
For users in the Philippines, also check whether the issue changes between home Wi-Fi and mobile data. Prepaid balance, carrier maintenance, local power interruptions, and ISP outages can resemble a device problem. Avoid repeated resets when the service itself is unavailable.
How to confirm the fix
The browser no longer flags the current credential and the account shows only recognised sessions. Repeat the test after one normal restart. A workaround that succeeds once but fails immediately after reboot is not a complete fix.
When to get official help
Contact the provider immediately if the email address, recovery phone, or purchases changed. Before contacting support, note the device model, operating-system version, app version, exact error text, time of failure, and the steps already tested. Never send a password, one-time code, recovery phrase, or full payment-card number.
