Providing "verification" info to a third-party site to unlock a password can lead to personal data breaches.