If you’re seeing a message that your password was found in a past data breach, this article explains what it means and what to do next.
Quick hits
Your Underdog account was not hacked. We’re blocking a password that’s known to be unsafe.
You’ll need to reset your password before logging in or signing up.
We check passwords against a public list of known breaches to keep players safe.
FAQs
What does this message mean?
This message means the password you used has appeared in a past data breach somewhere on the internet (not necessarily related to Underdog). To protect your account, we require a password reset before you can log in or sign up.
Was my account hacked?
No, your Underdog account hasn’t been hacked. This simply means your password appeared in a breach from another site or service. We block those passwords to keep your account secure.
How do you know my password is in a breach?
We securely check passwords against a public database of known leaked passwords. This helps us identify passwords that are widely known to attackers.
Did Underdog have a breach?
No breach occurred on our side. This message only means your password appeared in a breach from another site or app. We’re taking precautions to keep your account secure.
How do I reset my password?
On the login screen, tap Forgot Password.
Open the password reset email we send you and follow the link.
Choose a new, unique password that you haven’t used anywhere else. You should be able to log in right away after resetting.
Where did you get this information?
We use a trusted security service that compiles lists of publicly known password breaches across the internet. This helps keep your account safe from attackers who try common leaked passwords.
Why didn’t you warn me earlier?
Passwords are constantly added to breach lists as they’re discovered. We alert you as soon as we detect your password is affected so you can reset it and stay protected.
Other companies don’t make me do this
Some companies don’t enforce this level of protection. We do because it’s the safest option for our players. Blocking breached passwords helps prevent account takeovers and keeps your funds secure.
Do you know where the breach happened?
We don’t have details about where your password was leaked, only that it’s part of a known list of breached passwords. Breaches can come from many different websites or services, so the safest step is to create a new, unique password that you haven’t used anywhere else.
Should I change my password everywhere?
If you’ve used this same password on other websites or apps, we strongly recommend changing it there too. Reusing passwords is one of the biggest risks for account takeovers. Using a unique password for each site keeps you safer.
Tips for a strong password
Use 12+ characters with a mix of letters, numbers, and symbols.
Avoid reusing passwords across different sites.
Consider using a reputable password manager to generate and store unique passwords.