Compromised Passwords even after changing password

[maxoakland]

I noticed a silly bug in Passwords and I'm wondering if anyone else has experienced this.

It tells me my password was compromised so I went to the website to fix it. I updated the password in Passwords, but it still says the password is compromised. I'm guessing because I didn't use the button in the Passwords app that says "Change Password"

I don't think Keychain access had this issue. I definitely never noticed it

 

[hobowankenobi]

You could test your theory, and use the Change Password button, no?

 

[maxoakland]

You could test your theory, and use the Change Password button, no?

I don't feel like changing my password again. You understand, I'm sure

 

[Nermal]

Did you change it to a randomly-generated password? If not, is it conceivable that the password you changed it to has also been compromised?

 

[NoBoMac]

^This. For example, guessing don't want to use the same password as this guy's.

Or maybe the password has not yet to be checked?

The Apple security document is vague, but the way I've read it, it semi-randomly sends a random chunk of one's passwords to check. Flag might drop off that entry later in the day, next day?

Password Monitoring

Password Monitoring matches passwords stored in the Password AutoFill Keychain against a continuously updated list of passwords known to have been leaked.

support.apple.com

 

[maxoakland]

Did you change it to a randomly-generated password? If not, is it conceivable that the password you changed it to has also been compromised?

Yes I used a randomly-generated password

 

[maxoakland]

^This. For example, guessing don't want to use the same password as this guy's.

Or maybe the password has not yet to be checked?

The Apple security document is vague, but the way I've read it, it semi-randomly sends a random chunk of one's passwords to check. Flag might drop off that entry later in the day, next day?

Password Monitoring

Password Monitoring matches passwords stored in the Password AutoFill Keychain against a continuously updated list of passwords known to have been leaked.

support.apple.com

Seems like they should be able to update that flag once you've changed the password