Password Breach Response

Free tool

Respond to a password breach without typing the password here.

Use your trusted password manager or browser vault to identify exposed credentials. FK94 gives you the safe order of operations without collecting secrets.

No-password breach response

Handle a password breach without typing secrets here.

FK94 does not collect passwords or hash them in public tools. Use your trusted password manager or browser vault to identify affected credentials, then use this response plan to reduce risk in the right order.

Run your password manager's breach and reuse audit.Use Bitwarden, 1Password, iCloud Keychain, Google Password Manager or another vault you already trust.Check the email and recovery accounts first.If the inbox can reset everything else, protect it before rotating lower-value apps.Rotate reused or weak passwords one account at a time.Start with email, domain registrar, payments, banking, cloud admin and social accounts.Add MFA after each rotation.Prefer authenticator apps or hardware keys for root accounts. Avoid SMS where stronger options exist.Save recovery codes in a protected vault.Do not store them in screenshots, chat threads, shared docs or email drafts.

Progress

Response checklist

20%

Work top-down. Rotating random low-risk accounts first wastes time during a real incident.

Urgent rules

1.If the breached password is reused on email, payments, domain, cloud admin or WhatsApp recovery, rotate it now.

2.If you suspect active access, secure the email account first and review active sessions before changing many accounts.

3.Never send the old or new password to FK94. A safe handoff uses screenshots, settings summaries and written context.