16 Billion Passwords Leaked: What to do

Secure password strategies graphic

Another breach
In June 2025, cybersecurity experts uncovered the largest password leak ever—over 16 billion unique passwords exposed and actively traded on the dark web. This massive breach, known as “RockYou2025,” is a clear sign that relying on passwords alone is no longer safe.
Why Are Passwords Failing Us?
Credential Stuffing: Hackers use leaked passwords to break into other accounts, banking on password reuse.
Phishing: Even strong passwords can be stolen through fake emails and websites.
Password Fatigue: Most people reuse or slightly tweak passwords, making attacks easier.
What Should You Do Now?
1. Use Multi-Factor Authentication (MFA): Add a second layer of security, like a code sent to your phone, to keep accounts safe even if your password leaks.
2. Get a Password Manager: Let it create and store strong, unique passwords for every account. MOREnet is in the final stages of making one available for members
3. Check for Breaches: Use tools like Have I Been Pwned to see if your credentials are at risk, and update them if needed.
4. Stay Alert: Watch for phishing attempts and enable account alerts for suspicious activity.