The security dashboard finishes its list of checks

Health has new checks:

• Insecure websites: logins that use http://. Addresses on your own device or local network don’t count.
• Expiring soon: cards, IDs and passports that have expired or expire within 60 days.
• Passkeys available: sites that accept passkeys where you haven’t saved one, from a list that ships with the app, so no site is looked up.
• Backup codes running out: two or fewer unused.
• Old passwords: not changed for a year. This is a reminder, and it doesn’t affect your score.

Change password opens the site’s own change-password page, starts the generator, and saves the new password. The old one stays in the password history.

Dismiss hides a warning you’ve decided to accept. It stops counting against your score, follows your account to your other devices, and comes back by itself when what it’s about changes. The dismissed list is at the bottom of Health.

The browser extension now has the dashboard too, in a tab: Settings → Security dashboard.