Change Your Facebook Password Now

Change Your Facebook Password Now

Everyone should be changing their Facebook passwords after it was discovered all use passwords have been left unencrypted and searchable in plaintext.

We are living in the age where data breach, privacy disaster and incidents are common. Every month, we get news about privacy breach and security incidents that are initiated by cyberattackers. These attacks can also come from company’s side in the form of privacy breach. When a company asks for your personal information in an event of filling the data fields, you expect the company to keep your personal information private by storing it a secure place.

But unfortunately, this is not the case with every company. Yesterday, Facebook has messed up again with another privacy disaster. From the Cambridge Analytica scandal to sharing your phone number, the most popular social network has a long history of privacy flaws.

According to the recently blog published by Krebs on Security, Facebook stored passwords for hundreds of millions of users in a plain and readable text, exposing them for years (dating back to 2012) to their employees. The worst thing is, your password has been searchable by more than 20,000 employees who work in the company. The estimated users affected by this password breach, are between 200 million and 600 million.

Right after Kerb’s news, Facebook Vice President (Engineering, Security and Privacy) Pedro Canahuati posted in a blog, stating that “As part of a routine security review in January, we found that some user passwords were being stored in a readable format within our internal data storage systems. This caught our attention because our login systems are designed to mask passwords using techniques that make them unreadable. We have fixed these issues and as a precaution we will be notifying everyone whose passwords we have found were stored in this way.”

Pedro claim, “To be clear, these passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them”.

On the other end, Kerb’s insider who was a part of this investigation, “access logs showed some 2,000 engineers or developers made approximately nine million internal queries for data elements that contained plain text user passwords.” The detailed investigation proved that most affected users are from Facebook Lite, which tends to be used in nations where net connections are sparse and slow.

If big companies like Facebook are not following the basics, how can we rely on others? It’s a big security no-no that hurts the expectation of millions of internet users.

What to do now?

No one can guarantee complete protection but still there are few ways that can help you in tighten your privacy and security, some of these includes the following:

  • Change your password as soon as possible. 
  • Keep it your habit to change your password twice in three months. 
  • Keep your password hard to hack by using complex numbers. Password managers can help you in this. 
  • Add Two Factor Authentication (2FA) to your account. 
  • You can also sign up to receive alerts about unrecognized logins. Facebook has the tool for this. 
  • You can use the physical security key that requires your finger to scan and approve the login attempt. 
  • You can use YubicoKey for instant and secure access to your Facebook account.

About the Author

Anas Baig is a Security Journalist covers most of the Cyber Security & Tech news. He is a security professional and writer specializing in Science and Technology, with a passion for dinosaurs, archaeology, robots, cars and animals great and small.


  • Live From ISC West 2023 Preview

    ISC West 2023 is right around the corner! This year’s trade show is scheduled from March 28–31 at the Venetian Expo in Las Vegas, Nevada. The Campus Security & Life Safety and Security Today staff will be on hand to provide live updates about the security industry’s latest innovations, trends, and products. Read Now

    • Industry Events
    • ISC West
  • A Break from Routine

    It was three years ago right about now that COVID was bringing the world to its knees. In mid-March of 2020, the president put travel restrictions on all flights in and out of Europe, the NBA suspended its season, and Tom Hanks announced that he’d tested positive for the disease—all in the same night. It was officially a national emergency two days later. Read Now

    • Industry Events
    • ISC West
  • Until We Meet Again

    A short three years ago we were all pondering whether to attend any tradeshows all thanks to COVID-19. Sorry to bring that nightmare up again, but it seems that little pandemic is in the rear-view mirror, and it’s time to meet again. Read Now

    • ISC West
  • Cyber Hygiene: What it Looks Like for IoT Devices

    Cyber Hygiene: What it Looks Like for IoT Devices

    For our second pillar about the Industrial Internet of Things (IIoT) Pillars of Security, we are going to discuss what cyber hygiene looks like for IoT devices. Read Now

Featured Cybersecurity

New Products

  • Dahua 2-Wire IP Video Intercom System

    Dahua 2-Wire IP Video Intercom System

    Dahua Technology is introducing a new line of expandable 2-wire IP video intercom solutions for the North America market. The New 2-wire IP video intercom is more advanced, cost effective, and designed to help businesses increase their security. 3

  • SecureAuth


    The acceleration of digital transformation initiatives as a result of COVID-19 has created a lasting impact on how businesses empower their workforce and engage customers. 3

  • SAFR® from RealNetworks

    SAFR® from RealNetworks

    A unique feature in SAFR version 3.4 is its ability to automate alerts to security personnel when a spoofing attempt or a fraudulent attempt to gain access is detected. 3