Detecting compromised credentials

A method comprising:

• receiving, by a computing device of a content management system, user login credentials associated with a user account of the content management system, the user login credentials including a first account identifier and an unhashed first password;
• obtaining, by the computing device, account login credentials for accounts managed by the content management system, the account login credentials including a plurality of second account identifiers and corresponding second password hash values, the corresponding second password hash values generated using a first hashing algorithm;
• generating, by the computing device, a first user password hash value based on a first hashing algorithm and the unhashed first password;
• authenticating, by the computing device, the user login credentials based on the first user password hash value and the account login credentials;
• obtaining, by the computing device, compromised login credentials including a plurality of third account identifiers and corresponding third password hash values, the corresponding third password hash values generated using a second hashing algorithm distinct from the first hashing algorithm;
• generating, by the computing device, a second user password hash value based on the second hashing algorithm and the unhashed first password;
• determining, by the computing device, that the unhashed first password is compromised based on the second user password hash value and the compromised login credentials.