Skip to content

Fix: Password is Compromised Warning in Safari on iPhone & iPad

Are you getting a 'Password Compromised' warning in Safari on your iPhone? Learn how to troubleshoot and fix this issue.

Apple devices have a feature known as Detect Compromised Passwords that automatically cross-checks the saved passwords in a data breach and alerts when they are compromised.

We can change and update the password within the saved passwords to remove the alert message.

You will receive the following warning message: ‘This password has appeared in a data breach, which puts this account at high risk of compromise. You should change your password immediately.

Compromised and easily guessed password alert in Safari browser

In this guide, we have shared the steps to fix the password-compromised alert in the Safari browser.

On this page, you can find and jump to:

Resolve the Password Compromised Alert

Safari automatically detects the breached password using ‘Detect Compromised Passwords’ feature. We must ensure that the feature is enabled under Safari settings to have the feature working in background. Here are the steps to enable:

  1. Head over to the Settings app on your iPhone device.
  2. Scroll to the Passwords section, and tap on Security Recommendations.
  3. Make sure to keep Detect Compromised Passwords option has been enabled.
    Detect Compromised Passwords toggle button in Safari iPhone

Apple will now perform a check and let you know whether your passwords have been compromised in a data breach.

Now, if you’ve received the alert about compromise passwords, the first thing you should do is change the password of the site. For that, tap on Change Password on Website command when it appears.

Change password on Website link in Safari iPhone

It shall now be taken to that site. Sign-in with your existing password and change your credentials with a new password. You should also consider enabling the two-factor authentication (2FA) if available.

If required, you can let the iPhone keychain save the new password which can be reused within Safari app.

Once that is done and you have changed your account credentials, the warning message will no longer be displayed on your device.

info icon
Tip: While setting a new password, you recommend making it a combination of upper and lower-case letters, numbers, and symbols. Also, consider creating a long password and double-check that you haven’t used that password on any other account.

Bottom Line

You can deactivate the ‘Detect Compromised Passwords’ feature to disable the alert. However, that isn’t the recommended course of action and should be avoided.

Instead, taking immediate action to change the password should be your top priority when you see the password breach message.

Furthermore, if you continue to see this warning message even after changing your password on a site, may be other accounts are also part of the password breach. So head to the Security Recommendations tab, check all such accounts, and change their passwords immediately.

Lastly, if you've any thoughts or feedback, then feel free to drop in below comment box. You can also report the outdated information.

Please share the article if you find it helpful:

Disclosure: This page may contain affiliate links, which means we may receive compensation for your purchases; of course at no extra cost to you (indeed, you may get special discounts).
Kushal Azza

Kushal Azza

Kushal Azza is a Google Certified IT Professional, Digital Content Creator, and Go-To Digital Marketer with Engineering Degree. He has over a decade of experience solving tech problems, troubleshooting, and innovating digital solutions. Follow him on Twitter and LinkedIn.

2 comments and feedback

    1. Hi John, the Security Recommendations option is available under iPhone’s Settings > Passwords. You will be able to see the warning under this section Security Recommendations.

Leave a thought or feedback

Please leave a descriptive comment or feedback with your real name. Our human moderator vets every comment, and it may take 24 to 48 hours to get published or rejected.

Your email address will not be published, and we will never spam your inbox. Required fields are marked *