intitle:index.of tells Google to look for web directories that have "directory listing" enabled.
: Don't use "gmailpassword.txt" yourself! Use tools like Bitwarden, 1Password, or Dashlane to generate and store unique, complex passwords for every site. indexofgmailpasswordtxt work
: Use Have I Been Pwned to see if your email address has been involved in any known corporate data breaches. intitle:index
While it is technically possible for someone to accidentally leave a text file full of passwords on an unsecured server, the specific search for gmailpassword.txt is largely ineffective for several reasons: : Use Have I Been Pwned to see
To understand why people search for this, you have to understand (or Google Hacking). This involves using advanced search operators to find information that isn't intended for public view.
Instead of worrying about who is "dorking" for your password, you should focus on making your account impossible to access even if your password is leaked.