Passwords and authentication
Security Recommendations
Most people call this warnings about weak, reused and leaked passwords.
Your iPhone checks saved passwords against known data breaches and flags any that are weak, reused or compromised.
This setting is present on your iPhone.
- We have this path on file but have not yet confirmed it against an official source.
Where to find it - iOS 18 and later
- Passwords
- Security
What it does
The check uses cryptographic methods that do not reveal your passwords to Apple. Each warning links straight to the site so you can change the password.
What changes
When it is on
You are warned about compromised and reused passwords.
When it is off
No warnings appear.
Should you turn it on?
Good reasons to turn it on
- Finds credentials already exposed in a breach.
- Reused passwords are the most common cause of account takeover.
- Your passwords are never sent to Apple in readable form.
Good reasons to turn it off
- The list can be long and discouraging at first.
Battery
No real change
Privacy
Helps
Performance
No real change
Cellular data
No real change
Storage
No real change
Out of the box: On.
Where this setting used to live
Apple moves settings between releases. This is every location we have on file.
-
iOS 18 and later
Passwords > Security
-
iOS 14 to iOS 17
Settings > Passwords > Security Recommendations
Questions people actually ask
- Is it safe for Apple to check my passwords against breaches?
- The check is designed so your actual passwords are never revealed to Apple.
If it is not working
- Work through the compromised list first, then the reused one.
- Change the password on the site, and the phone offers to save the new one.