Chrome data breach warning on upgrade?

[zebu]

When attempting to upgrade Joomla 3.9.20 to 3.9.21 using the admin interface in Google Chrome, I got a Chrome dialog warning me that "A data breach on a site or app exposed your password." (See https://security.googleblog.com/2019/12 ... hrome.html and https://blog.google/products/chrome/bet ... rotectionsfor details on how this feature works.)

This only occurred on the update, not when logging in to the site, so I don't think it's my credentials, but I could be mistaken. Does the upgrade page use a default username/password for a Joomla site that this feature might be triggering on? Any other theories as to what might be going on?

[zebu]

My current theory is that it was trying $ftp_pass from configuration.php, a pretty weak password from a previous version of the site. Testing suggests that Google has flagged that as a 'breached password' from previously appearing in an unrelated data breach. Does that sound plausible?

[AMurray]

Remove the FTP information entirely - you don't need it.

[AMurray]

All you need when updating Joomla is log on with your Super Admin account, go to Joomla Update and do the update.

The FTP function is there for use if required but on majority of decent hosting, is not required.

[Webdongle]

https://forumpostassistant.github.io/docs/ please