3·
1 year agoThis was my initial read, so I clicked over to the discussion. They discuss the lack of captcha on that domain, and how that protection is flawed in every lemmy instance.
In short, there’s no way 1.05 million genuine new accounts went to a single, small lemmy domain in less than a week.
Preface: I have no opinion. Have not installed, and will not install because I don’t need it.
If you have to ask, it’s probably worth investigating further.
The first thing I would do is search around for any mention of the app name and variants on the word “password”.
Never install anything that you don’t trust, and dissociate from your “real” email/identity for those that you aren’t sure about. Whoever owns the software potentially owns your credentials.