What/Where triggers a "Change at-risk password" message?

So, the password its referring to is crazy complex as all heck and only a few days old from being basically made up. What/Where does this get message get triggered from? It showed up when I in my bitwarden browser extension (MS Edge/Windows x64/147.0.3912.72) recently (maybe last 5 or so days ago).

I’m locally hosting my own vaultwarden docker/server over https (npm) that the extension is pointed at. I know that’s a whole other security layer that I will look at.

@SomeoneOnLine Welcome to the Bitwarden Community Forum!

It seems, you are using an unofficial server software, which is not supported by Bitwarden, as it is an independent product. From time to time, there will be compatibility issues between the official Bitwarden client apps (browser extension, mobile app, desktop app…) and an unofficial server product, when Bitwarden implements changes to its own server software and/or client apps. “…Bitwarden cannot guarantee that official clients will work perfectly with non-official servers.”

(Also due to this - and for other reasons - we recommend using the official Bitwarden server software.)

It is generally not possible for members of the Bitwarden community (users or developers) to help with such issues - and with issues of the unofficial server itself. Please seek support in their community spaces.

If you can replicate your issue on an official Bitwarden server, feel free to open a new thread here.


PS: See also here: Change At-Risk Passwords | Bitwarden