iPad compromised / easily guessed password message

[zeefour]

Saw this on my iPad today about my Virgin Media account - am still utterly baffled why you can't use 2FA to protect your online account. But I need to change my password as it's been compromised in a data leak, at least according to a security warning I've had. Anyone else had this warning / know anything about it? Unfortunately it doesn't give the date for anything on the message... Thanks!

[-tony-]

what data leak - what security warning - from whom? - it may be genuine but theres no other posts that i can see so i would be cautious - treat it as spam until you are sure

[goslow · Accepted solution]

---

@zeefour wrote:

Saw this on my iPad today about my Virgin Media account - am still utterly baffled why you can't use 2FA to protect your online account. But I need to change my password as it's been compromised in a data leak, at least according to a security warning I've had. Anyone else had this warning / know anything about it? Unfortunately it doesn't give the date for anything on the message... Thanks!

---

Am not much of an Apple user myself but have a look at the links below. Is this what you are referring to? Apple's own password management features?

https://support.apple.com/en-gb/guide/security/sec7f0432063/web

https://support.apple.com/en-gb/guide/security/sec78e79fc3b/1/web/1

VM's password complexity/requirements have fallen behind current recommendations but, for something like 'My Virgin Media' and VM email, they are used alongside other measures such as recaptcha.

Some organisation, such as those offering password manager services for example, now cross-reference user passwords against known lists from data breaches. Any password which has ever been on such a list should not be used.

One of the most important points is to make sure you are using a unique and complex password for each of your different platforms/services. If you are using a compromised password and it is being used across several different platforms/services, then you are significantly increasing your chances of your accounts being accessed by others.

[zeefour]

Yes it is part of Apple's 'Detect Compromised Passwords' and I only had this warning (that I saw) today, certainly only within the last 2 days.

Definitely a genuine security warning.

Clearly it has appeared on a list of compromised passwords and been cross-checked as part of iOS built-in security tools.

Must admit when I had to contact VM to change the password a couple years back, they chose my password and it was very simple! I did question whether it was good enough at the time. Now been changed.

Thanks both!

[BenMcr]

Make sure you also update your security details in My Virgin Media. That's here https://my.virginmedia.com/my-profile/view

They allow someone to reset a password using those details, so always pick a new question and answer if there is risk your existing password is known by someone you don't want!

[Corey_C]

Thanks for your post and for reaching out to the Community Forums, Zeefour,

Some great advice offered by fellow forum members. Also be sure to follow the password guidelines here: https://www.virginmedia.com/help/how-to-create-a-strong-password

Cheers,

Corey C

[rncross]

@Cory You do realise Virgin's own website enforces a weak security policy for the "My Virgin Media" accounts. As mentioned many times on this forum, it prevents anyone from using long passwords which, as any security specialist will tell you is much more important. Its unfortunate that this has been Virgin's policy for many years now.

[Ayisha_B]

Thanks for your feedback @rncross

I will pass this on. 

Regards