Post

Yep I’m going in to change mine on here, and not saving it on my phone. Thank you for this suggestion.

Out of an abundance of caution I’d recommend deleting and recreating any app passwords

i'd put my bets on "breakthrough bluesky phishing lure"

You can check them here: bsky.app/settings/app-passwords

Probably not, but if it’s going to stress you out, you can just click this link. If it says “No app passwords” (or something very similar) you can completely let this go. bsky.app/settings/app...

So, is this a breach that's just affecting Bluesky, and is there any danger if we didn't click any suspicious links?

Yes that's what this means. App passwords are always a vulnerability.

Also third-party apps that have signed in with oauth. For some bizarre reason, the url isn't linked from the web app. bsky.social/account

2FA