Fix · Security mistakes

My password was leaked or I reused it

Blocks your workSecurity

What you may see

A website told me my password appeared in a leak
I use the same password in many places

Most likely cause

Attackers try leaked passwords on other sites; a reused password lets one leak open many accounts.

Check first (about two minutes)

Make a list of the most important accounts: email first, then hosting, domain, payments, database, GitHub.

The fix prompt

What you type here never leaves your browser. The search runs on this page, and nothing is sent to a server or to an AI.

The exact error or what you see

What you did before it happened

Kept only in this browser, on this device. Keys and passwords are removed before anything is saved.

Prompt language

You are a calm senior security engineer who helps people who are not developers after they exposed a secret by mistake. I am not a developer, so explain every step in plain words and tell me exactly which button, menu or command you mean. If you are not sure about something, say so; do not guess.

THE PROBLEM
My password was leaked or I reused it

THE EXACT ERROR OR WHAT I SEE
[paste the exact error here]

WHAT I DID BEFORE IT HAPPENED
[write in a few words what you did before it happened]

MOST LIKELY CAUSE
Attackers try leaked passwords on other sites; a reused password lets one leak open many accounts.

DO THESE STEPS, IN THIS ORDER
1. Give me an order of changes: my main email first (it can reset all others), then domain, hosting, payments, database, code hosting, social media.
2. For each: a new unique long password from a password manager, two-step sign-in turned on, recovery options checked, and active sessions or devices reviewed.
3. Explain a simple password manager setup for me and my team, with no sharing of passwords in chat.
Stop and tell me if what you see does not match a step. Do not skip ahead.

CHECK THAT IT WORKED
- The important accounts have unique passwords and two-step sign-in, and no old sessions remain.
Tell me exactly what I should see on the screen when it works.

DO NOT CHANGE
- Do not change passwords by following a link in an email. Type the site address yourself.
- Anything I did not ask about: the design, the text, other pages, other settings or the data.
- Do not delete files, data or branches, do not reset or force-push, and do not rewrite history, unless you first show me exactly what would be lost and I say yes.
- Do not paste, print or ask me to paste a password or secret key into this chat. If one is needed, tell me which settings page of the right service to store it in.

WHEN YOU FINISH
Explain in simple words what you changed (file by file or setting by setting), why you changed it, and how I can undo it.

Paste it into Claude, ChatGPT, Gemini or Cursor, then follow what it says.

After you tried it, did it work?

Steps

Give me an order of changes: my main email first (it can reset all others), then domain, hosting, payments, database, code hosting, social media.
For each: a new unique long password from a password manager, two-step sign-in turned on, recovery options checked, and active sessions or devices reviewed.
Explain a simple password manager setup for me and my team, with no sharing of passwords in chat.

Do not do this

Do not keep passwords in a notes app or a chat.
Do not change passwords by following a link in an email. Type the site address yourself.

Try another entry