Security lists the passwords that need attention:
- In known breaches: appears in Have I Been Pwned’s list. Choose Check for breaches; only the first five characters of each password’s hash are sent.
- Reused: the same password on more than one site.
- Weak: easy to guess, as the zxcvbn estimator sees it.
- Websites without https: the password crosses the network unencrypted.
Beside each, Change password opens the site’s own change page. Make a new password with the generator, change it on the site, then save it in Vallkey.
Last updated October 3, 2026