A Google warning about an exposed password may concern your Google password or a saved password for another website. Identify which credential is affected before changing an unrelated account.
Verify the warning directly
Open Google Password Manager or Password Checkup yourself rather than trusting the alert’s link. Google’s guide recommends checking the warning there to confirm it is authentic.
In Chrome, open Passwords and autofill → Google Password Manager → Checkup. You can also use Password Checkup at passwords.google.com in a browser.
Read the affected account and issue
Google distinguishes compromised, reused, and weak passwords. A saved password for an online shop is not the same credential as your Google Account password, even when both use your Gmail address as the username.
If the Google Account password itself may be unsafe, Google can require a change even when you do not use Password Checkup. Follow the account’s own security flow.
Change the real password at the provider
- Identify the site and username listed in the warning.
- Open that provider’s legitimate account settings.
- Replace the exposed password with a strong, unique one.
- Update the saved password after the provider confirms the change.
- Change the same password anywhere else you reused it.
Editing or deleting only the password-manager entry does not change the password on the website. Dismissing the warning also does not make the underlying credential safe.
Investigate suspicious activity separately
Check recent account activity, devices, and recovery settings if the warning concerns Google or if you see unauthorized actions. A breach warning alone does not identify exactly when an intruder accessed an account; activity and settings provide additional evidence.
If you repeatedly receive legitimate Google password-change requests, review the device for unwanted software and keep security tools updated. Avoid entering the replacement password into the same suspicious page that triggered the problem. For a work identity, inform the administrator so they can assess related organization access.
Official references
- Change compromised passwords in your Google Account
- Asked to change your Google Account password
- Secure a hacked or compromised Google Account
Reviewed against Google’s official guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.