16 billion usernames, password credentials leaked; it's time to enable Passkeys on your device

Leaked online credentials are said to be linked to user accounts on major platforms such as Apple, Facebook, Google, GitHub, and Telegram, including the government's online service portals.

Touted to be the largest database breach in recorded history of the Internet to date, more than 16 billion online account credentials have reportedly been leaked on the darknet and other online illegal marketplaces.

The username and other private details are linked to online accounts on major platforms such as Apple, Facebook, Google, GitHub, Telegram, and government services, reported Forbes, citing a Keeper Security report.

Cyber security researchers have uncovered around 30 database sets, each containing tens of millions to 3.5 billion user credentials such as usernames, passwords, phone numbers of social media platforms, VPN (Virtual Private Network) apps of regular users and corporate company employees.

The leaked details can be misused by cyber crooks to prey on naïve users through phishing techniques. They usually use social engineering techniques. They masquerade as executives of government agencies, such as Income Tax officers and even bank employees. As they already have the potential victim's full name and phone number, they will be able to convince naïve users to voluntarily share their financial details, such as bank account numbers and important details and steal their money.

So far, Apple, Google, Facebook and other major companies have not made any official comments on the massive database breach.

Smartphone and computer users are advised to be cautious about text messages and emails from unknown senders. Even if the name is familiar, do not share any personal details on messenger apps.

Also, users are advised to ditch passwords and enable the passkeys security feature.

Passkeys is way better and safer alternative to passwords, as it give users peace of mind about their account’s security. They don't have to write it down in a secret journal or store it in a phone's digital notepad. Most importantly, unlike passwords, passkeys can't be stolen or guessed easily by cyber crooks to take over an online account.

Once the user enables Passkey on the device, he/she can log in to the account by choosing the Passkey option instead of entering a traditional password.

The device will securely connect with an online account, using the access key stored on the encrypted storage of the device to authenticate the identity.

The user can use biometric security features such as FaceID or TouchID (fingerprint sensor) or the device's passcode to log in to the online platform.

All major platforms, such as WhatsApp, Apple, Google, Facebook, X (formerly Twitter), and Windows support Passkeys.

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech