Google Critical Security Alert: one compromised password

[Massor]

I just received a Google Critical Security Alert
Some of your saved passwords were exposed online.
One compromised password. Change this password now!
Some of your saved passwords were exposed in a data breach independent of Google. You need to change them.
This account is at risk:
voidtools.com
What is happening?
Thanks!
(I already change the password.)

[void]

Thank you for the issue report.

No need to worry, this isn't related to any breach of voidtools.com or the forum itself.

The message is from Google's Password Checkup feature (built into Chrome/your Google Account).
It works by comparing your saved passwords against databases of credentials leaked from other websites' breaches.

When it says the breach is "independent of Google," that means Google itself wasn't hacked, and voidtools.com wasn't hacked either.
What most likely happened: the password you used for your voidtools.com account was also used on some other site, and that other site suffered a data breach at some point.

Since the same password showed up in that leaked data, Google flagged your saved login here as being at risk
Attackers could try that same leaked password against other sites you use it on.

Good news is you've already done exactly the right thing by changing it.
Just make sure that old password isn't reused anywhere else you still use it, and you're all set.

[Massor]

Thank you Void.
Yes, the voidtools forum was a single password stored in Google Password Manager, but the bad news for me is that the leaked password I am using on many sites (unknown number for now) and I must find them all and change the password.
Maybe it's time for a password manager, if I find a free, good one.

[horst.epp]

Thank you Void.
Yes, the voidtools forum was a single password stored in Google Password Manager, but the bad news for me is that the leaked password I am using on many sites (unknown number for now) and I must find them all and change the password.
Maybe it's time for a password manager, if I find a free, good one.

I use KeePassXC for this.
It's free and has all one needs.

[ChrisGreaves]

Maybe it's time for a password manager, if I find a free, good one.

I maintain all my passwords in a regular table (150 rows) in a Word2003 document stored on my laptop. I think it doesn't get simpler or cheaper than that.
I live alone, and each month I copy that document to a USB key that is in an envelope "to be opened in the event of my death" by a trusted friend so that they can close various accounts.

I am sure that many people will recommend off-line ("cloud") storage, but as far as passwords go, I am leery of anyone else having possession of my passwords.

Thanks for sharing your experience; I see that storing passwords via an agency can have its benefits.

Cheers, Chris