Raise your hand if you have used Have I Been Pwned to spot yourself in an online breach. Raise your other hand with me if you’ve actually spotted your email or password there at least once .With every single service requiring you to enter your email or phone number to authenticate yourself, we have all been in a situation where our credentials have leaked — I can bet more than once. While we place disproportionate weight on unique passwords, they make up only a third of your digital security stack.