Have I Been Hacked?

I received an email from "Free Hack Report <noreply@getyourhackreport.com>" telling me my password "XXX" has been compromised. (The XXX is indeed the 1st 3 letters of a common password I use for low level sites like chat pages etc.) So clearly someone does know something about my passwords. The email invites me to get my free Breach report from "Dark Sources Security". A google search didnt turn up anything of interest. I have not clicked on anything but am concerned. I am thinking of spending some of the holiday break setting up new passwords for all of my accounts that include the "XXX" password. What is the safest way of me doing this please to ensure I'm not just replicating any breach that has occurred? And is there any other advice for me please? (I have very limited technical knowledge but can follow clear instrucitons well!) Thanks very much in antiticpation.

 

You can check your email addresses over here.
https://haveibeenpwned.com/

 

Thanks Eldon. Ok those hacks I knew about. But I think i Need to try and improve my security are there any tips on how to refresh/change passwords and make sure they stay safe and not get hacked off of these sites please?

 

One option is to use a password manager.
These two are popular.
LastPass Password Manager.
http://www.majorgeeks.com/files/details/lastpass.html
KeePass Password Safe.
http://www.majorgeeks.com/files/details/keepass_password_safe.html

 

Thanks for the suggestions!

 

Thanks @TimW and @Eldon, recently I had the same issue happen to me. Thx again for the suggestions!

 

I use LastPass. It'll create strong passwords and you can set the number of characters. I would be sure to write them down because I have had 2 times where it didn't save it until the second time I logged in. You can also save form data to auto fill. I love Tim's idea to use a different computer to change passwords. I never would have thought of that. I would never use a phone to do it because of all the adware on apps now.

 

I checked them out, and they have a Twitter account <snip> and a facebook page. I registered to check one of my emails, and I was surprised to find 3 passwords of mine that had been compromised. One of the passwords was an active PayPal password, I was freaked out and immediately changed my PayPal password. The site is def legit. I also used the website I have been pawned, but that site doesn't show your passwords. I would definitely recommend trying them out, their website is <snip> . they don't charge anything which is cool and you get your report within minutes.

 

are the two utilities above still the recommended ones?

 

Yes.