DEV Community

Discussion on: Facebook stored hundreds of millions of passwords in plaintext

Collapse
 
tiguchi profile image
Thomas Werner

The benefit of using random generated passwords is that only the password for Facebook has leaked, which cannot be used to get access to any other place online.
Since the leak is known now and most likely addressed by Facebook ASAP, the only thing you have to do is to generate a new password for Facebook, and Facebook only. No need to hunt down all places online where you may or may not have recycled the same old password123.

Another good auth practice is using Two-Factor-Authentication when offered by a website. Such is the case with Facebook. So even a leaked Facebook password doesn't mean that your account is compromised right away when you make use of that.

Thread Thread
 
__shadz_ profile image
Chardenal Matthieu

Oh ! Didnt think of that ! Thanks for the explanation :)

Thread Thread
 
shostarsson profile image
Rémi Lavedrine

A very useful website that you can use is :
haveibeenpwned.com/

You can try your email address against it and then know if your email address has been part of a data breach.

It is a website from Troy Hunt which a speaker and security professionnal. I encourage you to have a look at his website as well if you're interested in Security in general.
troyhunt.com/