Leaked credential detection

As a security improvement, we’ll now let you know if your Pinecast password has been leaked by another site. When you enter your email and password, the hashed version of your email and password is compared against databases of leaked credentials. If a match is found, it means that your email and password were part of a password breach from another website. This is one of the most common ways accounts get hacked: another website where you used the same email and password gets hacked, and a hacker uses those re-used credentials to try logging you in elsewhere.

When we detect that you’re logging in with leaked credentials, we’ll send you an email to let you know. We strongly encourage you to change your password when you receive one of these emails. We also strongly recommend setting up 2FA with an authenticator app, which adds another layer of protection.

If we notice two Pinecast accounts with leaked credentials getting signed into from the same device, we’ll block the attempt. If you have multiple accounts and two or more of them were involved in a password breach, it might prevent you from signing into Pinecast. Reach out to customer support and we’ll help you to perform a password reset.