Check a suspected password breach without sharing your password

Do not paste a current password into an arbitrary breach checker. Use a reputable service that can check an email address separately or compare password hashes without receiving the full password. If a reused password is exposed, begin with the email account and password manager, change affected accounts from a trusted device, revoke active sessions, and regenerate recovery codes. A breach notice can itself be phishing: navigate to the service directly instead of following its sign-in link.