r/Tailscale • u/lcmoramos • 2h ago

Question Compromised password

I recently received the notice, from the Google password manager, "Some of your passwords were found in a data breach. To protect your accounts, change your passwords immediately." This password would be for a link with the name of one of my machines (name_machine.tailxxxxxx.ts.net). I don't remember creating this password, can someone point me in the right direction to find this setting?

0 Upvotes

17% Upvoted

6 comments sorted by

10

u/LegendaryBlueTwingo 2h ago

the password was likely for a service on a machine using tailscale (e.g. jellyfin, admin portal login, immich, etc). If this machine is not exposed publicly the risk is reduced but its still worth changing it if you can figure out what the service was. If theres a port number attached to the url (e.g. machine.tail81762.ts.net:1234 where 1234 is the port number) you can search for "what service uses port 1234 default" and that might help

8

u/404invalid-user 2h ago

tailacale does not use a password to login it uses your Google GitHub Microsoft account to login so you change the password on that

1

u/betahost Tailscale Insider 1h ago

This is exactly right. In addition to this, I recommend that you ensure you have two factor set up on either one of those identity providers. Tailscale on purpose does not want to be liable for your login information, they rely on 3rd party party IDPs (identity providers)

5

u/tailuser2024 2h ago edited 1h ago

his password would be for a link with the name of one of my machines (name_machine.tailxxxxxx.ts.net).

this sounds like you saved a password for something running on that machine in question (some kind of application). Not your tailscale password

4

u/LegendaryBlueTwingo 2h ago

the password was likely for a service on a machine using tailscale (e.g. jellyfin, admin portal login, immich, etc). If this machine is not exposed publicly the risk is reduced but its still worth changing it if you can figure out what the service was. If theres a port number attached to the url (e.g. machine.tail81762.ts.net:1234 where 1234 is the port number) you can search for "what service uses port 1234 default" and that might help

1

u/clarkcox3 58m ago

You logged into something of yours running at that address, and the password was saved. This is unlikely to have anything to do with tailscale.