Facebook found millions of passwords stored in plain-text in internal investigation

Facebook has been storing 'hundreds of millions' of user passwords in plaintext

Facebook said there was no evidence its employees abused access to this data - but thousands of employees could have searched them.

Facebook on Thursday said it had for years stored millions of user passwords in plain text, a significant oversight for a company that remains in the spotlight for failing to protect users' privacy.

Facebook will, in due course, notify any users that have been affected by this security issue.

In line with best security practices, Facebook said that in general it masks people's passwords when they create an account so that no one at the company can see them.

Facebook acknowledged the security failure in a press release, saying that users whose passwords had been stored in a readable format would be notified.

According to KrebsonSecurity, a Facebook source said between 200 million and 600 million Facebook users may have had their account passwords stored in plain text.

Just when you think things couldn't get any worse with Facebook, something else comes along to lower your opinion of the social network even further.

Time for USA to recognize Israel's sovereignty over Golan Heights
Trump's decision has been building up for several weeks now, a senior administration official tells CNN. Pompeo's words gave a public boost to the Israeli leader at the height of a tight re-election campaign.

My Facebook insider said access logs showed some 2,000 engineers or developers made approximately nine million internal queries for data elements that contained plain text user passwords.

The exposed passwords affect Facebook, Instagram and Facebook Lite, a version of Facebook for areas with slower internet speeds. This month, Facebook was also criticized for selling users' phone numbers to marketing companies so they could spam them.

Presumably, in response to Krebs' report, Facebook has issued a statement about general password security earlier today, explaining in the abstract that there has been a breach, but without providing the level of detail on the subject included in Krebs' coverage.

As a final point, it's worth noting that no users will have to reset their passwords. In January, Facebook staffers reviewing code noticed that some Facebook web applications were logging plaintext passwords and storing them on Facebook internal servers, Krebs said.

Unfortunately for Facebook, each new headline seems to chip away at what is left of public trust, according to Terence Jackson, chief information security officer (CISO) at Thycotic. While there was no compromised data, Facebook recommended that people can secure their account by changing their password.

Keeping passwords hashed, or encrypted, is widely regarded as fundamental to cybersecurity.

Related news:

Hot News

isis-killer-beheading-video-story-top Backbreaker Morant leads Murray State to upset
Mar 23, 2019 - 14:56
Just like that, the Blue Devils were up 40-27 and cruising. "We got a double-digit lead, we're hungry and we want more". Regardless, Williamson and Barrett provided a snapshot moment that basketball fans are sure to cherish for a long time.

isis-killer-beheading-video-story-top Genetics expert reckons he can clone Barcelona star Lionel Messi
Mar 23, 2019 - 14:55
The 34-year-old has scored 85 goals in 154 global games and could also play in Portugal's game in Serbia on 25 March. It is expected Messi will be fit to play in Barcelona's next game against Espanyol on March 30.

isis-killer-beheading-video-story-top Fugitive diamond magnate Nirav Modi arrested
Mar 23, 2019 - 08:28
Meanwhile, a Mumbai court has issued a non-bailable warrant against Modi's wife Amy whose last known location was in the US. This month, Britain's Daily Telegraph said it had tracked him down to a luxury apartment in London's Centre Point tower.

isis-killer-beheading-video-story-top Petition to revoke Brexit crashes UK Parliament's website
Mar 22, 2019 - 12:28
The UK government "will still have a chance of a deal, no deal, a long extension or revoking Article 50" until 12 April , he said. But Commons Speaker John Bercow told MPs who complained about the Prime Minister's statement: "None of you is a traitor".

isis-killer-beheading-video-story-top Opec stresses need for 2019 oil supply cuts
Mar 22, 2019 - 12:28
Elsewhere, Brent oil for May delivery on the ICE (NYSE:ICE) Futures Exchange in London rose 31 cents, or about 0.45%, to $67.86 a barrel.

isis-killer-beheading-video-story-top Manchester United's Marcus Rashford sent home from England duty with injury
Mar 22, 2019 - 11:57
The problem now for Southgate is success will be judged on winning a trophy and we know that's the hardest part at global level. " I recognize now that my attempt to show support for my teammates at the time could be negatively interpreted ".

isis-killer-beheading-video-story-top Romney responds to Trump’s disparaging of the late Sen. McCain
Mar 22, 2019 - 09:27
McCain shocked some by indirectly condemning Trump at her father's funeral, noting in her remarks that "America was always great". Among the tweets was a claim that McCain had finished "last in his class" at the US Naval Academy.

isis-killer-beheading-video-story-top Steve Smith, David Warner face World Cup test in IPL
Mar 21, 2019 - 08:40
I wasn't just a leader of the group trying to pump someone's tyres up to make them play well and give them confidence. This is the best chance England have got I've seen in recent times. "I'd love to be involved in both for sure".

isis-killer-beheading-video-story-top Cindy McCain posts stranger's hateful message about John McCain and their daughter
Mar 21, 2019 - 08:29
This week, Trump unloaded a new series of anti-McCain tweets in which he said he never had been "a fan" and never would be. McCain served in the Vietnam War and died of brain cancer a year ago .

isis-killer-beheading-video-story-top Bianca Andreescu's ranking to skyrocket after Indian Wells
Mar 21, 2019 - 07:59
Andreescu started the third set much better, holding in her first two service games including coming back from 0-30 to go up 2-1. Osaka used it as a springboard to win titles at the US and Australian opens while ascending to the No. 1 ranking in January.

isis-killer-beheading-video-story-top New Zealand prime minister announces immediate ban on all assault weapons
Mar 21, 2019 - 07:56
The minimum legal age to own a gun in New Zealand is now 16, or 18 for military-style semi-automatic weapons. The AR-15 was used at Port Arthur and has been used in a number of high-profile USA mass shootings.

isis-killer-beheading-video-story-top Pilots of doomed Lion Air flight 'scoured handbook in minutes before crash'
Mar 21, 2019 - 07:48
Thomas said this fact should have been reported "as you could argue that the pilot was a distraction or an assistance", he said. Soerjanto Tjahjono, the head of KNKT told CNN on Wednesday they were not aware of the details in the Bloomberg report.

isis-killer-beheading-video-story-top Indian diamond tycoon Nirav Modi: From billionaire jeweller to arrest
Mar 21, 2019 - 07:00
Modi, who denies wrongdoing, left India before the details of the fraud became public. Nirav Modi was arrested after the Enforcement Directorate's extradition plea.

isis-killer-beheading-video-story-top Trump Lays Down Cover Fire Before Release Of Mueller Report
Mar 21, 2019 - 06:45
In that scenario, the AP reporters add, "the conservative media, including Fox News ", will "act as an echo chamber". That's up to the attorney general. "You know better than anybody there was no collusion", Trump said to one reporter.

isis-killer-beheading-video-story-top Rep. Nunez Sues Twitter and Several Users for $250 Million for Defamation
Mar 20, 2019 - 09:29
Nunes said the lawsuit was "the first of many", when he appeared on Sean Hannity's Fox show Monday night. Mair declined to comment, saying she has yet to read through the lawsuit.