Password Health measures how secure your passwords are across your accounts. Password Health is available with personal plans and Dashlane professional plans.
You get a Password Health score out of 100 when you have at least five logins in your account that aren't excluded. The higher your score, the lower your risk from hackers and cyberattacks.
The Password Health page shows which passwords to update first and recommends ways to raise your score.
To make sure only you can access your private data, create a complex, unique password for each account. First, change any password that's compromised in a breach or hack.
If you're an admin on a professional plan, you can check plan members' Dashlane security scores.
Understand your Password Health score
When any of your accounts are at risk, Dashlane shows which critical accounts to secure first. Critical accounts include bank, email, health, social media, and online store accounts. Cybercriminals target these accounts, so make them your top priority.
Dashlane calculates your score from all the logins you store in your vault. Dashlane gives more weight to critical accounts and to compromised, reused, and weak passwords. Excluded passwords don't count toward your score.
Password checks when you save or autofill
When you add or update a password, Dashlane checks whether the password has leaked before you save it.
Dashlane also shows whether a password is compromised, reused, or weak when you log in to a website.
Security alerts for professional plans
This section applies to members of organizations that use Credential Protection.
You receive two types of security alerts:
-
Credential Risk Alerts ask you to change a compromised password when Dashlane autofills the login. These alerts are on by default.
-
Credential Risk Notifications are Slack messages about compromised, weak, or reused passwords in your vault. Your organization needs to set up Risk Notifications for Slack.
Credential Protection for organizations
Password Health categories
Password Health has four categories. Learn more about how Dashlane identifies each category and calculates your score in this article:
Compromised passwords
A login is compromised if a data breach affects the login or the password appears in a list of leaked passwords. A login is also compromised when Dark Web Monitoring finds the login on the dark web. The dark web is a group of hidden websites that standard search engines don't show. Criminals sometimes use these websites to sell stolen data.
Dashlane also checks whether your other logins use the same or a similar password. If they do, Dashlane marks those passwords as compromised too.
Respond to an alert about a password
Weak passwords
Dashlane considers a password weak if someone can guess it with little effort.
Weak passwords lower your Password Health score. Use the Password Generator to create the strongest password or passphrase each website allows.
Generate a password or passphrase using Dashlane
Reused passwords
Some people use the same password, or small variations of it, for different accounts. Reused passwords are one of the main reasons attackers break into several accounts at once.
Your Password Health score goes down when your passwords are identical or too similar. The more reused passwords you have, the lower your score.
Some services share one account, so you use the same username and password for each. You can link those websites together.
Manage linked websites and subdomains
Excluded passwords
Excluded passwords don't count toward your Password Health score. You can include an excluded password again later.
You might exclude a password for one of these reasons:
- Someone shared the password with you, so you can't change it
- The password's website doesn't allow a more secure password
Exclude passwords from Password Health
Common questions
How does Dashlane calculate my Password Health score if only I can see my passwords?
Dashlane calculates your Password Health score in the background, on your device. Dashlane follows a zero-knowledge principle, so only you can access your vault. Dashlane's servers don't have access to your login details.
How Password Health works
Common questions about security at Dashlane
Dashlane security and compliance
Does Dashlane see my password when it checks the dark web?
No. Dashlane uses hashes to check for leaks, so the server never sees your full password. Learn more about hashes in this article:
How can I improve my Password Health score?
To get a score of 100 and secure your accounts, update all your Compromised, Reused, and Weak passwords. Use Dashlane to create a secure, unique password for each account.
Generate a password or passphrase using Dashlane
When you change a password, a Dashlane pop-up asks whether to update the login or create a new login.