Change or set your password, understand the breached-password alert (MarketplaceHub was not breached), and manage Google/Amazon sign-in safely.
Change your password in the Password section of the Security page (user menu → Security): enter your current password, then the new one — at least 8 characters, with a live strength meter. If you signed up through Google or Amazon and have no password yet, Set a password adds one so you can also sign in with your email address (and unlock MarketplaceHub's own 2FA).
Prefer to skip the password altogether? Add a passkey and sign in with Face ID, Touch ID, Windows Hello or your device PIN — passkeys can't be phished, guessed or reused, and your password stays available as a backup.
MarketplaceHub's edge security checks sign-ins against publicly known data breaches. If your exact email + password combination appears in one, you'll get an email — subject "Change your MarketplaceHub password — it appears in a data breach" — and a Security notification. Important context: MarketplaceHub was not breached; the password leaked from some other service, and any reused password is unsafe everywhere. Change it on the Security page, and consider turning on 2FA. This alert is always sent (at most once per week) and can't be muted.
The Connected accounts section shows whether Google or Amazon sign-in is linked, with a Manage connected accounts button to link or unlink either. Two guardrails to know:
Unrecognized devices always trigger an alert (and the full 2FA prompt where enabled) — see Device security. Sensitive changes like setting a first password or signing out devices require a recent sign-in; if yours is older than a few minutes you'll be asked to sign in again before the action completes.
Tell us what you were doing and what happened — the notification text or a product SKU helps us find it fast.
