How to use Google Password Manager to check if your Gmail, Instagram, X and other passwords have leaked

Password breach

A massive data breach has exposed over 16 billion login credentials—roughly 16 crore usernames and passwords—spanning major platforms like Gmail, Instagram, and X (formerly Twitter). While this leak is not tied to a direct hack of these platforms, the stolen data was gathered over time using infostealer malware that infects personal devices and silently extracts login information.

Given the scale and scope of this breach, users need to verify whether their accounts have been compromised. Fortunately, Google offers a simple yet powerful tool—Password Checkup—to help users identify and secure affected credentials.

Google’s Password Checkup tool is built into both your Google Account and the Chrome browser. It compares your saved passwords against known data leaks and flags any compromised, reused, or weak passwords.

Visit passwords.google.com and sign in to your Google Account.

Click on the “Password Checkup” option to begin the scan.

Click the three-dot menu (top-right), go to Settings > Autofill and passwords > Google Password Manager.

From there, tap Checkup to view vulnerable credentials.

Open your device’s Settings, search for “Password Manager,” and select it. Tap on “Password Checkup” to start the scan.

Open the Chrome app, go to Settings, and access the Password Manager to perform a checkup.

Google will highlight:

Compromised passwords: Credentials exposed in known breaches. These should be changed immediately.

Reused passwords: Using the same password across accounts increases your vulnerability.

Weak passwords: Simple or guessable passwords that need to be replaced.

For each issue, Google provides direct links to the respective sites or apps for quick password updates.

Change affected passwords immediately, especially if they are reused across multiple platforms.

Use strong, unique passwords for every account, ideally managed with a password manager.

Enable two-factor authentication (2FA) for an added layer of security.

Revoke access to unknown third-party apps and monitor for any suspicious activity.