I received an email asking that I update my password due to a security incident. What does this mean?

Our team recently launched a helpful security update to our platform. As part of this update, our system can detect password and privacy breaches to notify our users when their credentials may have been leaked by a data breach of a third party.

For security purposes, we don't have details on specific websites or apps you may use the same login credentials for, but this email was to alert you of a potential security risk.

What is a breached password? 

A breached password is a password that has been exposed in a previous data breach. In many cases, breached passwords are used to take over on other systems and accounts. You can check your password and find out if your password is a breached password: 

https://haveibeenpwned.com/Passwords

How do we find out about breached passwords?

We have recently added a security feature that helps us check passwords against those obtained from previous data breaches. If our systems detect that you are using a breached password we will alert you of this finding and guide you to update your password.

As a precaution, we do recommend updating your password for your Headspace login to safeguard your account details.

If you do not remember the password to your account, we ask that you reset it by visiting https://www.headspace.com/login/forgotten-password and entering the email address associated with your Headspace account.

Once you receive the email and reset your password, you will be able to continue with your Headspace journey.

If you are still having trouble updating your password, you may have registered using your Facebook login credentials. Please follow the steps below: 

1. Open the Headspace app and click on your name in the bottom right corner of the screen
2. Click on the gear icon in the top right corner of the screen
3. On the Settings Page, click on the "Account Details" tab
4. Under the Password section, click on "Unlink" and follow the prompt