What's the reason for the "Change at-risk password" warning?

[Nail1684]

@Cris70 Welcome back!

@Cris70

The “Change at-risk password” is too generic, we need to know why BW thinks the password needs to be changed, so that we can take an informed action.

I agree, it should show the exact reason…

@Cris70

It appeared to me in the desktop app (on Linux) and in BW web vault, but NOT in the browser extension (Firefox and Chrome).

The browser extensions are probably still on a 2025.11.x version – the new “Change at-risk passwords” warning is part of the 2025.12.0 Release. (and version 2025.12.0 is now available in the Chrome web store)

@Cris70

That password is NOT part of the “exposed passwords” report.

In general, passwords that show up on the “Change at-risk password” warning, can be

1. weak
2. re-used
3. exposed / breached

And when a password now already is shown as “re-used”, like in your example – if there is no further distinction, if that password would also get breached/exposed, that probably would go undetected then. That’s not ideal.