PSA: Change your Twitter passwords now

PSA: Change your Twitter passwords now

We may earn a commission for purchases made using our links.

If you needed another reminder to frequently update your passwords, Twitter has you covered. The social network has revealed that a bug caused the platform to store passwords unmasked in an internal log. That means passwords were stored unprotected in plain text and could have potentially been stolen. You should change your password just in case.

Twitter says they have “no reason to believe password information ever left Twitter’s system.” That doesn’t mean they definitely weren’t accessed, just that they haven’t detected any foul play. They are advising users to change their passwords as a precautionary measure. Here’s their full statement on what happened:

“We mask passwords through a process called hashing using a function known as bcrypt, which replaces the actual password with a random set of numbers and letters that are stored in Twitter’s system. This allows our systems to validate your account credentials without revealing your password. This is an industry standard.

Due to a bug, passwords were written to an internal log before completing the hashing process. We found this error ourselves, removed the passwords, and are implementing plans to prevent this bug from happening again.”

Change your password and start using two-factor authentication if you’re not already. These types of things happen far too often and you don’t want your sensitive information out there. Taking 5 minutes to secure your account now could save you a world of pain later on.

Source: Twitter