Nearly half of observed login attempts across websites protected by Cloudflare involved leaked credentials. The pervasive issue of password reuse is enabling automated bot attacks and account takeovers on a massive scale.
Standard feature in cloudflare, checks all passwords going through their endpoints to see if they have been compromised before. Alerts the site admin if it has been. My dashboard is littered with them lol
Why is CloudFlare observing user passwords???
Right… anyone ‘observing’ my login is compromising it.
Paragraphs 3 & 4 describe the (free) Leaked Credentials Detection service they’re leveraging for this research.
The article covers that.
Standard feature in cloudflare, checks all passwords going through their endpoints to see if they have been compromised before. Alerts the site admin if it has been. My dashboard is littered with them lol