A password is considered compromised when it has been exposed, stolen or accessed by someone who shouldn't have it. This can happen as a result of a data breach, phishing attack, malware or by using the same password across multiple websites.

Once a password has been compromised, attackers may try to use it to access other accounts that use the same login details.