Change Your Facebook Password Now

Change Your Facebook Password Now

Everyone should be changing their Facebook passwords after it was discovered all use passwords have been left unencrypted and searchable in plaintext.

We are living in the age where data breach, privacy disaster and incidents are common. Every month, we get news about privacy breach and security incidents that are initiated by cyberattackers. These attacks can also come from company’s side in the form of privacy breach. When a company asks for your personal information in an event of filling the data fields, you expect the company to keep your personal information private by storing it a secure place.

But unfortunately, this is not the case with every company. Yesterday, Facebook has messed up again with another privacy disaster. From the Cambridge Analytica scandal to sharing your phone number, the most popular social network has a long history of privacy flaws.

According to the recently blog published by Krebs on Security, Facebook stored passwords for hundreds of millions of users in a plain and readable text, exposing them for years (dating back to 2012) to their employees. The worst thing is, your password has been searchable by more than 20,000 employees who work in the company. The estimated users affected by this password breach, are between 200 million and 600 million.

Right after Kerb’s news, Facebook Vice President (Engineering, Security and Privacy) Pedro Canahuati posted in a blog, stating that “As part of a routine security review in January, we found that some user passwords were being stored in a readable format within our internal data storage systems. This caught our attention because our login systems are designed to mask passwords using techniques that make them unreadable. We have fixed these issues and as a precaution we will be notifying everyone whose passwords we have found were stored in this way.”

Pedro claim, “To be clear, these passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them”.

On the other end, Kerb’s insider who was a part of this investigation, “access logs showed some 2,000 engineers or developers made approximately nine million internal queries for data elements that contained plain text user passwords.” The detailed investigation proved that most affected users are from Facebook Lite, which tends to be used in nations where net connections are sparse and slow.

If big companies like Facebook are not following the basics, how can we rely on others? It’s a big security no-no that hurts the expectation of millions of internet users.

What to do now?

No one can guarantee complete protection but still there are few ways that can help you in tighten your privacy and security, some of these includes the following:

  • Change your password as soon as possible. 
  • Keep it your habit to change your password twice in three months. 
  • Keep your password hard to hack by using complex numbers. Password managers can help you in this. 
  • Add Two Factor Authentication (2FA) to your account. 
  • You can also sign up to receive alerts about unrecognized logins. Facebook has the tool for this. 
  • You can use the physical security key that requires your finger to scan and approve the login attempt. 
  • You can use YubicoKey for instant and secure access to your Facebook account.

About the Author

Anas Baig is a Security Journalist covers most of the Cyber Security & Tech news. He is a security professional and writer specializing in Science and Technology, with a passion for dinosaurs, archaeology, robots, cars and animals great and small.

Featured

  • Report: 47 Percent of Security Service Providers Are Not Yet Using AI or Automation Tools

    Trackforce, a provider of security workforce management platforms, today announced the launch of its 2025 Physical Security Operations Benchmark Report, an industry-first study that benchmarks both private security service providers and corporate security teams side by side. Based on a survey of over 300 security professionals across the globe, the report provides a comprehensive look at the state of physical security operations. Read Now

    • Guard Services
  • Identity Governance at the Crossroads of Complexity and Scale

    Modern enterprises are grappling with an increasing number of identities, both human and machine, across an ever-growing number of systems. They must also deal with increased operational demands, including faster onboarding, more scalable models, and tighter security enforcement. Navigating these ever-growing challenges with speed and accuracy requires a new approach to identity governance that is built for the future enterprise. Read Now

  • Eagle Eye Networks Launches AI Camera Gun Detection

    Eagle Eye Networks, a provider of cloud video surveillance, recently introduced Eagle Eye Gun Detection, a new layer of protection for schools and businesses that works with existing security cameras and infrastructure. Eagle Eye Networks is the first to build gun detection into its platform. Read Now

  • Report: AI is Supercharging Old-School Cybercriminal Tactics

    AI isn’t just transforming how we work. It’s reshaping how cybercriminals attack, with threat actors exploiting AI to mass produce malicious code loaders, steal browser credentials and accelerate cloud attacks, according to a new report from Elastic. Read Now

  • Pragmatism, Productivity, and the Push for Accountability in 2025-2026

    Every year, the security industry debates whether artificial intelligence is a disruption, an enabler, or a distraction. By 2025, that conversation matured, where AI became a working dimension in physical identity and access management (PIAM) programs. Observations from 2025 highlight this turning point in AI’s role in access control and define how security leaders are being distinguished based on how they apply it. Read Now

New Products

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge.