Google passwords lets you search by website and then see password for each site. But I want to know, can I search by password and find site(s) that password is used on?

Say I get a phishing email "I know your password is ..." it would be useful to see which site has been hacked/has sold my details.

  • 1
    That type of message looks like some sort of phishing. Anyway, searching what sites uses certain password looks to me as a big security hole. – Rubén Apr 7 '20 at 16:52
  • @Rubén Google Passwords and other password managers surely know this... – Mr. Boy Apr 8 '20 at 10:26
  • What do you mean? – Rubén Apr 8 '20 at 17:29
  • @Rubén I mean Google passwords knows what my passwords are. Doesn't it... it can display them on screen – Mr. Boy Apr 8 '20 at 17:33
  • Just keep an encrypted local copy in a sheet and use sheet formulas to find the mentioned password. – marikamitsos Apr 8 '20 at 17:37

Google will only know the leaked passwords, (and only the ones that they know). They don't even know your password that they use on their own site.

Some sites do know your password, you know which bank you are (I don't know why, but banks seem to be particularly bad at this). If they don't know to do password authentication without storing your password, then they are the sort of company that is also more likely to be hacker, or leave a USB-storage-device containing your password and other sensitive data on a train.

And if you get a phishing email, they are trying to invoke a behaviour in you, that will result in compromising your self. If they know your password, then they will not e-mail you saying we know that your password is abcxzy. They won't even tell you that they know it. If they know it, then they want you to be ignorant of this for as long as possible.

Therefore use a password safe/manager (User is already doing this). Use a different password for each site, use passwords of 30 random characters, unless forced to make it weaker by the (banks) security policy. And lock the safe with a good strong pass-phrase, using muli-round encryption (taking about 1/2 a second: fast-enough not to be a pain, and slow-enough to stop an attacker).

  • I am using a password manager. That's why I tagged my question with google-passwords. – Mr. Boy Apr 8 '20 at 10:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.