: Indicates the list contains roughly one million pairs of usernames (or emails) and passwords.
: Enabling MFA is the most effective defense, as it prevents access even if an attacker has your correct password.
: Suggests the credentials come from a variety of sources (e.g., gaming sites, social media, e-commerce) rather than a single specific breach.
: Use services like Have I Been Pwned to check if your email appears in known breaches.
: A marketing term used by sellers to claim the data is "fresh," has a high success rate, and is not just recycled information from old public breaches.
: Use a unique, randomly generated password for every account through a password manager to ensure that a breach on one site doesn't compromise others.