Helping keep customers safe with leaked password notification

Cloudflare announced a security enhancement that checks user passwords against known breached credential lists using hashed comparisons, warns users for the first three successful logins with a compromised password, and then requires a reset, complemented by email notifications and guidance. The post highlights the risks of password reuse and credential stuffing, recommends adopting unique passwords and two-factor authentication (particularly hardware keys), and signals plans to broaden SSO options and support CISA’s Secure by Design pledge.