Change Your Facebook Password Now

Change Your Facebook Password Now

Everyone should be changing their Facebook passwords after it was discovered all use passwords have been left unencrypted and searchable in plaintext.

We are living in the age where data breach, privacy disaster and incidents are common. Every month, we get news about privacy breach and security incidents that are initiated by cyberattackers. These attacks can also come from company’s side in the form of privacy breach. When a company asks for your personal information in an event of filling the data fields, you expect the company to keep your personal information private by storing it a secure place.

But unfortunately, this is not the case with every company. Yesterday, Facebook has messed up again with another privacy disaster. From the Cambridge Analytica scandal to sharing your phone number, the most popular social network has a long history of privacy flaws.

According to the recently blog published by Krebs on Security, Facebook stored passwords for hundreds of millions of users in a plain and readable text, exposing them for years (dating back to 2012) to their employees. The worst thing is, your password has been searchable by more than 20,000 employees who work in the company. The estimated users affected by this password breach, are between 200 million and 600 million.

Right after Kerb’s news, Facebook Vice President (Engineering, Security and Privacy) Pedro Canahuati posted in a blog, stating that “As part of a routine security review in January, we found that some user passwords were being stored in a readable format within our internal data storage systems. This caught our attention because our login systems are designed to mask passwords using techniques that make them unreadable. We have fixed these issues and as a precaution we will be notifying everyone whose passwords we have found were stored in this way.”

Pedro claim, “To be clear, these passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them”.

On the other end, Kerb’s insider who was a part of this investigation, “access logs showed some 2,000 engineers or developers made approximately nine million internal queries for data elements that contained plain text user passwords.” The detailed investigation proved that most affected users are from Facebook Lite, which tends to be used in nations where net connections are sparse and slow.

If big companies like Facebook are not following the basics, how can we rely on others? It’s a big security no-no that hurts the expectation of millions of internet users.

What to do now?

No one can guarantee complete protection but still there are few ways that can help you in tighten your privacy and security, some of these includes the following:

  • Change your password as soon as possible. 
  • Keep it your habit to change your password twice in three months. 
  • Keep your password hard to hack by using complex numbers. Password managers can help you in this. 
  • Add Two Factor Authentication (2FA) to your account. 
  • You can also sign up to receive alerts about unrecognized logins. Facebook has the tool for this. 
  • You can use the physical security key that requires your finger to scan and approve the login attempt. 
  • You can use YubicoKey for instant and secure access to your Facebook account.

About the Author

Anas Baig is a Security Journalist covers most of the Cyber Security & Tech news. He is a security professional and writer specializing in Science and Technology, with a passion for dinosaurs, archaeology, robots, cars and animals great and small.


  • 12 Commercial Crime Sites to Do Your Research

    12 Commercial Crime Sites to Do Your Research

    Understanding crime statistics in your industry and area is crucial for making important decisions about your security budget. With so much information out there, how can you know which statistics to trust? Read Now

  • Boosting Safety and Efficiency

    Boosting Safety and Efficiency

    In alignment with the state of Mississippi’s mission of “Empowering Mississippi citizens to stay connected and engaged with their government,” Salient's CompleteView VMS is being installed throughout more than 150 state boards, commissions and agencies in order to ensure safety for thousands of constituents who access state services daily. Read Now

  • Live From GSX: Post-Show Review

    Live From GSX: Post-Show Review

    This year’s Live From GSX program was a rousing success! Again, we’d like to thank our partners, and IPVideo, for working with us and letting us broadcast their solutions to the industry. You can follow our Live From GSX 2023 page to keep up with post-show developments and announcements. And if you’re interested in working with us in 2024, please don’t hesitate to ask about our Live From programs for ISC West in March or next year’s GSX. Read Now

    • Industry Events
    • GSX
  • People Say the Funniest Things

    People Say the Funniest Things

    By all accounts, GSX version 2023 was completely successful. Apparently, there were plenty of mix-ups with the airlines and getting aircraft from the East Coast into Big D. I am all ears when I am in a gathering of people. You never know when a nugget of information might flip out. Read Now

    • Industry Events
    • GSX

Featured Cybersecurity


New Products

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation. 3

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3