Password Checkup reports risks in saved credentials, including exposed, reused, and weak passwords. A finding about a website password is not automatically a finding about your Google Account password. Check the website and username before changing anything.
Open Checkup through a known route
Use Google Password Manager’s Checkup area or go directly to the account’s password-management site. Confirm the selected Google Account. If you arrived through an unexpected alert, verify the warning there rather than using an untrusted message link.
Read which category applies. Exposure indicates an unsafe published credential combination; reuse and weakness describe different risks. None of these labels alone establishes the full history of activity in the affected website account.
Change the actual affected website credential
Open the legitimate website or app independently and use its password-change process for the identified username. Choose a strong, unique replacement and update the correct saved entry afterward. Editing only the stored value does not change the password accepted by the website.
If the same password was reused, review the other affected accounts as well. Do not replace unrelated credentials merely because their display names resemble the warned entry. Follow your work account’s security process where applicable.
Verify the result instead of dismissing the signal
Confirm the new credential works through the legitimate sign-in route and is stored under the correct account and username. Review additional security controls offered by that service without assuming a password change resolves every possible incident.
Dismissing a Checkup warning changes its visibility, not the password’s security. Google’s guide lets you restore dismissed warnings for review. Keep suspicious-activity investigation separate from ordinary password-strength cleanup, and never post the warned credential in a support ticket to demonstrate the problem.
Browse Gmail & Google Account help
References
Reviewed against the linked official product guidance on November 3, 2026. Features, limits, screen labels, and access can vary by account, platform, region, and organization policy.