So it is legal, in that I used the tools you mentioned (been awhile since I used "pwnd") to check, and found one breach and one paste (not surprising, I did get an alert and changed to even more complex passwords, as well as other mechanisms). So legal to see if I have been the victim of illegal exposure of private information? Illegal if someone uses it to steal my ID? Odd juxtaposition!

However, great article, and thanks for the security reminders!

Expand full comment