iPhones can flag saved passwords found in leaked data

Apple’s iPhone can warn users when saved passwords match credentials found in leaked data or are weak or reused. An alert does not mean the iPhone was hacked or that an account was accessed, but it signals that the password could put an account at risk.

The Passwords app stores flagged logins for review and checks credentials against a local list and through privacy-preserving checks with Apple’s servers. Apple does not identify where a password leaked, so reused passwords should be changed on every account, especially email and banking; users should also consider passkeys and two-factor authentication. Password monitoring is under Settings > Apps > Passwords > Detect Compromised Passwords, and account passwords must be changed on the relevant websites.