"password compromised" only showing on one device - possibly bug?

[AdrianaP]

Hello! First time here.

I just got a "your password has been compromised" warning about 5 different passwords on my iPad but I'm not getting the same warning on my iPhone, even though it's the same Keychain. They're all different passwords and very complex (all except one are Keychain suggestions).

I've also crosschecked on the "Have I Been Pwned" website and none of them appeared to have been leaked, and none of the e-mail accounts associated have been subjected to data breaches recently (I got a big scare when I first updated to iOS 14 lol).

I've turned the devices off and on and it still only shows up on the iPad and not on the iPhone.

I'm changing them either way just to be safe but is it possible that this is a bug or something?
Is there anything else I can do on the devices to see if the warnings pop up on the iPhone?

Thanks in advance!

 

[chscag]

Sounds like you received a false or scam message. I get the same thing once in awhile. The scam or false message is trying to get you to divulge your passwords. However, it's always a good idea to change passwords. If possible, use a password manager to create long complex passwords that are very difficult to compromise.

 

[DeltaMac]

Are you using Google Chrome for your iPad web browser? (Maybe that popup is only presented in Chrome?)

 

[AdrianaP]

Sounds like you received a false or scam message. I get the same thing once in awhile. The scam or false message is trying to get you to divulge your passwords. However, it's always a good idea to change passwords. If possible, use a password manager to create long complex passwords that are very difficult to compromise.

But it's showing up in the native iOS app, in Settings -> Passwords. Is that possible?

Are you using Google Chrome for your iPad web browser? (Maybe that popup is only presented in Chrome?)

No, I'm not. It showed up when I was using Safari and when I clicked on it, it sent me to the Settings app.

 

[chscag]

No, I'm not. It showed up when I was using Safari and when I clicked on it, it sent me to the Settings app.

Never click on a message like that. That is one of the ways the false warning or scam will try to get you to divulge your passwords. The clue here is that it sent you to the settings app.

 

[AdrianaP]

Oh wow I didn't think it could get into the native apps! I logged out from iCloud on the iPad and when I logged back in the warnings were gone. And then I changed the passwords directly on the websites just to be safe. Thank you!

 

[cjw25]

I received the same thing today. A recently restored iPad. Rebooted it today and got similar warning. The recommendations I knew were real, a number of my low risk sites use the same password and those were the ones listed. Go to System Settings -> Passwords> Security Recommendations, it will show suspected breaches from passwords you have saved keychain. I suspect this legit; probably a new feature in iOS 14.

..and after a quick search:

How to See Keychain Security Recommendations & Fix Security Risks

Apple’s new iCloud Keychain Security Recommendations feature is, in my opinion, long overdue. We live in a world where our data being compromised can pose very real threats, so it’s best to stay on top of things like password security and data breaches. Apple, notorious for taking security very...

www.iphonelife.com

 

[AdrianaP]

Yes, when I first updated to iOS/iPadOS 14 I got a few warnings of two email accounts and passwords that were subjected to data breaches in past years. It's a very useful feature.

This time it was a bit odd because it only showed the warnings on the iPad but it's all good now.