How to Find Leaked Passwords in Chrome, Edge, Wallet & iCloud Keychain

This guide shows you how to check if any of your saved passwords have appeared in known data breaches, using the built-in security tools in Google Chrome, Microsoft Edge, Apple Wallet (on iPhone), and iCloud Keychain. You’ll learn exactly where to look, what the warnings mean, and how to respond if a password has been leaked. No special software is needed—just your devices and a few minutes.

What You’ll Need

• Access to your computer (for Chrome and Edge) or your iPhone/iPad (for Wallet and iCloud Keychain).
• Your device passcode or password to view saved passwords.
• An active internet connection (the breach checks are done online).

Step-by-Step

In Google Chrome (Desktop or Android)

1. Open Chrome and click the three-dot menu in the top-right corner.
2. Select Passwords (or go to Settings > Autofill > Password Manager).
3. Look for the section labeled Password Checkup or Check passwords. It may show a summary like “X passwords compromised.�
4. Click Check passwords (or the button that says “Go to Password Checkup�). Chrome will run a security check on all saved passwords.
5. After the scan, review the results. If any passwords appear under Compromised, they have been found in a known data breach.
6. Click on each compromised password and select Change password to go to the site and update it. If you prefer, you can also use the “Check again� button to re-scan later.

In Microsoft Edge (Desktop)

1. Open Edge and click the three-dot menu (…) in the top-right corner.
2. Go to Settings > Profiles > Passwords.
3. Click the Password Monitor option (it may be listed as “Password Monitor� or “Check for leaked passwords�).
4. Edge will automatically scan your saved passwords and show a list of any that have been exposed in data breaches.
5. For each flagged password, click the “Change password� link to visit the site and create a new, strong password.

In Apple Wallet (iPhone/iPad)

1. Open the Wallet app on your iPhone or iPad.
2. Tap the three-dot menu (…) in the top-right corner, then select Card Details or Security – the exact wording may vary by iOS version.
3. Look for Password Security or Security Recommendations. Tap it.
4. Apple will check your saved passwords against known breaches and display a list of any that are compromised.
5. Tap on a compromised password to see the account and the option to Change Password on Website. Follow the prompts to update it.

In iCloud Keychain (via Settings on iPhone/iPad or System Settings on Mac)

1. On your iPhone/iPad: Go to Settings > Passwords (or Passwords & Accounts on older iOS). You may need to authenticate with Face ID, Touch ID, or your passcode.
2. Tap Security Recommendations at the top of the screen.
3. You’ll see a list of passwords that have appeared in data breaches, along with those that are reused or weak. The breached ones are usually marked with a yellow or red warning.
4. Tap each item and choose Change Password on Website to update it.
5. On a Mac: Go to System Settings > Passwords (or Keychain Access in older macOS). You’ll see a similar Security Recommendations section.

Common Mistakes

• Ignoring the “reusedâ€� warning – Even if a password isn’t flagged as breached, using the same password on multiple sites is risky. If one site is breached, all accounts using that password are vulnerable.
• Only checking one device – If you use Chrome on your computer but also have passwords in iCloud Keychain on your phone, you need to check both. They are separate systems.
• Not changing the password immediately – A “compromisedâ€� label means the password is already out there. Waiting to change it increases the chance of unauthorized access.
• Forgetting to update the password in the password manager – After you change a password on a website, make sure the new one is saved in the same manager (Chrome, Edge, or iCloud Keychain), or the next check will still show the old one.

Tips

• Run these checks regularly – once a month is a good habit, or after you hear about a major data breach in the news.
• Use a unique password for every site. Consider a password manager that generates and stores strong random passwords – the built-in tools in Chrome, Edge, and iCloud Keychain can do this.
• Enable two-factor authentication (2FA) on important accounts. Even if a password leaks, 2FA can block unauthorized access.
• If you have a lot of passwords, prioritize changing the ones for financial, email, and social media accounts first.
• After changing a password, the security check should update automatically, but you can manually re-run it to confirm.

Troubleshooting

• Chrome says “Check passwordsâ€� is unavailable – Make sure you’re signed in to Chrome with a Google account. The feature requires sync to be enabled.
• Edge Password Monitor doesn’t show any results – Ensure you’re signed in to Edge with a Microsoft account and that you have saved passwords in the browser. If you have none, there’s nothing to check.
• iCloud Keychain Security Recommendations are empty – This can happen if you haven’t saved many passwords or if the check hasn’t run yet. Try toggling iCloud Keychain off and on in Settings > your name > iCloud > Passwords & Keychain.
• You see “This password has appeared in a data breachâ€� but you’ve already changed it – The old password may still be saved in the manager. Delete the old entry or update it to the new one.
• Can’t find the security check in Wallet – The exact menu names change with iOS versions. On newer iPhones, look for “Securityâ€� or “Password Securityâ€� in the Wallet app’s settings. If you can’t find it, use the Settings > Passwords route instead – it covers the same data.

Frequently Asked Questions

Does Chrome’s password check work on my phone?

Yes, Chrome on Android has the same Password Checkup feature. On iPhone, Chrome can also check, but you may need to enable “Sync� and use the same Google account.

Will I be notified if a password is leaked?

Chrome and Edge may show a warning when you visit a site with a breached password. iCloud Keychain also sends a notification if you have “Security Recommendations� enabled. However, it’s best to proactively run the check.

Is it safe to store passwords in these built-in managers?

Yes, they use encryption and are generally considered secure. They are better than reusing the same password everywhere. However, if you use a shared computer, make sure you log out.

What does “compromised� mean exactly?

It means that the exact password you use has been found in a list of passwords exposed in a data breach. It does not necessarily mean your specific account was hacked, but you should change it immediately.

Can I check passwords that are not saved in the manager?

No, these tools only check passwords you have saved in that specific manager. If you have passwords written down or stored elsewhere, you’ll need to check them manually using a service like Have I Been Pwned.

What if I don’t use any of these browsers or Apple devices?

You can still check if your email address has been involved in a breach using a public service like Have I Been Pwned. For passwords, you can use that service’s “Passwords� search to see if a specific password has been leaked.

Related

• Bypass Samsung PIN: 5 Ways That Work
• PATH Variable in Linux: What It Is and How It Works
• Install Ansible on Windows: The Real Way