In the wake of the latest leak involving 5 million Gmail addresses and passwords, the advice was the same one we give in every situation like this: Change your password – especially if you re-use it on multiple services and websites. But if you’re checking to see if your email address and password is on the leaked list, beware of how you do it.