eHarmony was hacked, confirmed by eHarmony on 6/6/2012eHarmony has updated their blog confirming that passwords for a portion of their user base have been compromised.
If you have a eHarmony account, we strongly suggest that you immediately:
- Change your eHarmony password
- Check if you have re-used your eHarmony password on any other websites and if so, change those passwords too.
The LastPass security challenge can assist you in doing so.
Was *My* eHarmony Password Hacked?If you would like to find out if your eHarmony password was one of the 1.5 million that were leaked, you can use the below tool:
Wait a Minute, Why Is This Tool Safe?You already changed your password right? You no longer use that old password anywhere else right? If not please make sure you do that first. The above tool asks you to enter your eHarmony password, and then computes its MD5 hash and sends the result to LastPass.com to search the list of 1.5 million leaked password hashes. A hash is a mathematical function that is simple to perform in one direction, but very difficult to reverse. Meaning, the tool will convert your password into a series of characters in such a way that it will be very difficult to re-construct your original password.
Only the hash of your password will be sent to LastPass.com's servers, not your actual password. This hash will not be stored or logged at all. Please view source the page if you're technically inclined.
Note that if you used a simple password, such as one based on dictionary words, then it might be possible to reconstruct your original password. This is what all of the concern is about: the hashes of simple passwords can be easily reconstructed to reveal the original actual password. The eHarmony hashes seem to lack the typical dictionary based passwords, we think it's likely that the people responsible for the release only released the more difficult hashes. You should assume that your password was compromised and make sure you're not using it anywhere else.