Categories: Digital LifeNews

Facebook in hot water again. Hundreds of millions of passwords stored in plain text

Recently, Facebook has announced they’ve discovered a major security issue during their routine security review – approximately 200 million to 600 million Facebook users may have their account passwords stored in plain text format in their database, which is entirely accessible by 20,000 Facebook employees.

According to a report from KerbsOnSecurity, a source from Facebook have told them that hundreds of millions of Facebook user passwords were stored in a readable state for years, where some cases date back to 2012. To make matters worse, 20,000 employees from Facebook have access to these passwords.

Let’s not panic just yet, at least that’s what Facebook has to say. According to the social media company, ongoing investigations have indicated that these passwords were not abused by those who have access. A senior Facebook employee said that the security failures were due to employees building applications that logged unencrypted password data for Facebook users in plain text.

Sources on KerbsOnSecurity has also reported that some 2,000 engineers or developers made approximately nine million internal queries for data elements that contained plain text user passwords. They said that Facebook has issued a written statement to them, indicating that the company will inform “hundreds of millions of Facebook Lite users, tens of millions of Facebook users and tens of thousands of Instagram users” who are affected. Facebook Lite is a stripped-down version of Facebook that is designed for entry-level smartphones.

Prior to this, both GitHub and Twitter had encountered similar issues in recent months. But comparatively, the plain text passwords were only available to a much smaller group of people and for far shorter periods of time.

For Facebook to store passwords without encryption is reckless and it isn’t clear if a password change at the moment would make a difference if it continues to keep a copy of it in plain text. It is probably a good idea to change your password on other platforms if it shares the same password as your Facebook account.

On top of that, it is recommended that you use a unique password for different logins and this is where a password manager would come in handy. To secure your Facebook account further, it is also recommended that you enable two-factor authentication.

[ SOURCE ]

Recent Posts

Dongfeng Box Malaysia: 94hp compact EV with up to 310km of range, priced from RM101k

Dongfeng Box is now officially available in Malaysia. Launched in partnership with Central Auto Distributors…

1 hour ago

Nissan Kicks e-Power now open for booking in Malaysia, priced below RM130,000

Edaran Tan Chong Motor (ETCM) has announced that the Nissan Kicks e-Power is now open…

5 hours ago

TikTok, Content Forum and UiTM empowers students with Digital Literacy to promote a safer digital space

TikTok in partnership with Communications and Multimedia Content Forum of Malaysia (CMCF) have recently organised…

8 hours ago

Tesla owners in Malaysia can finally use the Autopark feature

Tesla owners in Malaysia have reported that their vehicles can now perform the Autopark feature.…

8 hours ago

Asus ROG Phone 9 series launching in Malaysia on 10th December 2024

After unveiling its latest smartphones, the Asus ROG Phone 9 series, to the world, Asus…

8 hours ago

WhatsApp Voice Message Transcripts converts voice into text

WhatsApp has introduced a new Voice Message Transcripts feature which allows users to easily convert…

15 hours ago

This website uses cookies.