How Google Chrome’s Password Checkup Extension Works
The latest security update for Google Chrome isn’t a new browser-specific feature, but an extension called Password Checkup.
As you could figure out by simply reading the extension’s name, Password Checkup verifies your passwords to make sure the credentials haven’t been compromised.
To do this, the extension just looks into a large database of breaches and scans for any potential information that could match yours. If there’s a risk of your username and password being exposed to hackers, the browser displays a warning, instructing you to reset the credentials.
The process, however, is a lot more complex and it starts with Google creating the database of breaches in order to power the process of looking for potential risks for your own credentials.
Google says that whenever it becomes aware of such a breach, it stores a hashed and encrypted copy of the data, but at the same time, it creates an unencrypted, 2-byte hashed prefix to partition the database. The full … (read more)