Heartbleed Bug: Which Websites Recommend Changing Passwords?

Capital One had an alert on their website saying they are safe from Heartbleed. TurboTax is also safe, so make sure you file your Taxes!

I noticed that the article had no financial institutions listed as being affected by the bug. That surprised me as I figured there would be some, and maybe they just haven't been listed yet.

It is no good to change your password UNTIL the site patches the vulnerability. MY internet accounts that used OPEN SSL have all sent me emails when done. As someone else stated it does NO GOOD to change before the patch.

FWIW Yahoo has patched.

Remember not all sites used OPEN SSL call our financial institution and ask them if they did and if they patched. If they cannot answer the question at this date I would question how securely your account information at that institution is being handled.

I use lastpass to manage my passwords. They've released a tool that examines your site list and tells you exactly which ones you need to change now, need to wait for a patch and change, etc.