Change Your Facebook Password Now

Change Your Facebook Password Now

Everyone should be changing their Facebook passwords after it was discovered all use passwords have been left unencrypted and searchable in plaintext.

We are living in the age where data breach, privacy disaster and incidents are common. Every month, we get news about privacy breach and security incidents that are initiated by cyberattackers. These attacks can also come from company’s side in the form of privacy breach. When a company asks for your personal information in an event of filling the data fields, you expect the company to keep your personal information private by storing it a secure place.

But unfortunately, this is not the case with every company. Yesterday, Facebook has messed up again with another privacy disaster. From the Cambridge Analytica scandal to sharing your phone number, the most popular social network has a long history of privacy flaws.

According to the recently blog published by Krebs on Security, Facebook stored passwords for hundreds of millions of users in a plain and readable text, exposing them for years (dating back to 2012) to their employees. The worst thing is, your password has been searchable by more than 20,000 employees who work in the company. The estimated users affected by this password breach, are between 200 million and 600 million.

Right after Kerb’s news, Facebook Vice President (Engineering, Security and Privacy) Pedro Canahuati posted in a blog, stating that “As part of a routine security review in January, we found that some user passwords were being stored in a readable format within our internal data storage systems. This caught our attention because our login systems are designed to mask passwords using techniques that make them unreadable. We have fixed these issues and as a precaution we will be notifying everyone whose passwords we have found were stored in this way.”

Pedro claim, “To be clear, these passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them”.

On the other end, Kerb’s insider who was a part of this investigation, “access logs showed some 2,000 engineers or developers made approximately nine million internal queries for data elements that contained plain text user passwords.” The detailed investigation proved that most affected users are from Facebook Lite, which tends to be used in nations where net connections are sparse and slow.

If big companies like Facebook are not following the basics, how can we rely on others? It’s a big security no-no that hurts the expectation of millions of internet users.

What to do now?

No one can guarantee complete protection but still there are few ways that can help you in tighten your privacy and security, some of these includes the following:

  • Change your password as soon as possible. 
  • Keep it your habit to change your password twice in three months. 
  • Keep your password hard to hack by using complex numbers. Password managers can help you in this. 
  • Add Two Factor Authentication (2FA) to your account. 
  • You can also sign up to receive alerts about unrecognized logins. Facebook has the tool for this. 
  • You can use the physical security key that requires your finger to scan and approve the login attempt. 
  • You can use YubicoKey for instant and secure access to your Facebook account.

About the Author

Anas Baig is a Security Journalist covers most of the Cyber Security & Tech news. He is a security professional and writer specializing in Science and Technology, with a passion for dinosaurs, archaeology, robots, cars and animals great and small.

Featured

  • Maximizing Your Security Budget This Year

    The Importance of Proactive Security Measures: 4 Stories of Regret

    We all want to believe that crime won’t happen to us. So, some business owners hope for the best and put proactive security measures on the back burner, because other things like growth, attracting new customers, and meeting deadlines all seem more pressing. Read Now

  • New Uses for AI

    New applications of AI in IP cameras are delivering precise detection, robust search capabilities, elevated data analysis and enhanced image quality. When combined with built-in analytics, AI can help streamline forensic investigations and also supports several mission-critical business functions. Read Now

  • The Critical Missing Piece

    As technology advances, security programs have invested heavily in advanced systems and sensors. These sensors generate massive amounts of data, often overwhelming the security teams tasked with monitoring them. AI technology promises to sift through this data, using logic and reasoning to differentiate potential threats from non-threats. Read Now

  • Computers Beginning to Come Back Online After CrowdStrike Caused Crash Friday

    Computers around the world are beginning to come back online after a defective update to Windows machines from cybersecurity provider CrowdStrike Friday affected almost 9 million machines. Read Now

Featured Cybersecurity

Webinars

New Products

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities 3

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3