GitLab

Introducing compromised password detection for GitLab.com

May 22, 2025Ruby Nealon
Introducing compromised password detection for GitLab.com
SummaryAI, from the source post

Introduces compromised password detection for GitLab.com users during sign-in. This feature compares the entered password against a database of known compromised credentials. If a match is found, users receive an alert banner and email notification, prompting them to change their password. This applies only to native username/password logins, not SSO. The post also reiterates existing security recommendations: using strong, unique passwords, setting up two-factor authentication, maintaining access to primary email and recovery codes, and registering with services like haveibeenpwned.com.

More from the Security Control Framework trail