LinkedIn was hacked, confirmed by LinkedIn on 6/6/2012

LinkedIn has updated their blog indicating that there was a breach, and several LastPass staff members who used unique passwords for LinkedIn only, as well as numerous individuals not associated with LastPass, have confirmed that LinkedIn's database has indeed been hacked.
If you have a LinkedIn account, we strongly suggest that you immediately:


  1. Change your LinkedIn password
  2. Check if you have re-used your LinkedIn password on any other websites and if so, change those passwords too.
    The LastPass security challenge can assist you in doing so.

Was *My* LinkedIn Password Hacked?

If you would like to find out if your LinkedIn password was one of the 6.5 million that were leaked, you can use the below tool:

Sorry JavaScript is required to use this tool



Wait a Minute, Why Is This Tool Safe?

You already changed your password, right? You no longer use that old password anywhere else, right? If not please make sure you do that first. The above tool asks you to enter your LinkedIn password, and then computes its SHA-1 hash and sends the result to LastPass.com to search the list of 6.5 million leaked password hashes. A hash is a mathematical function that is simple to perform in one direction, but very difficult to reverse. Meaning, the tool will convert your password into a series of characters in such a way that it will be very difficult to re-construct your original password.

Only the hash of your password will be sent to LastPass.com's servers, not your actual password. This hash will not be stored or logged at all. Please view source the page if you're technically inclined.

Note that if you used a simple password, such as one based on dictionary words, then it might be possible to reconstruct your original password. This is what all of the concern is about: the hashes of simple passwords can be easily reconstructed to reveal the original actual password.

I just want to see how it works...

It's fun to play with just how bad passwords are -- try any name you can think of plus any number you can think of, maybe capitalize it. e.g. -- Joshua13 It's in there. asdfasdf -- It's in there. Curse words? Definitely.

So what should I do now?

After you've updated your LinkedIn password, start better managing your online life with LastPass. LastPass will help you store all of your usernames and passwords in one secure, central location. You can update old passwords with randomly generated ones, and let LastPass do the work of remembering them and filling them for you. You can download the LastPass addon here.

Do you have an eHarmony account?

eHarmony was also recently compromised. See if your eHarmony password was leaked. So was Last.fm. See if your Last.fm account was leaked.