Latest in Entertainment

Image credit: SIPA USA/PA Images

Instagram bug inadvertently exposed some users' passwords

The company notified those impacted by a problem with its data download tool.
494 Shares
Share
Tweet
Share
Save

Sponsored Links

SIPA USA/PA Images

According to The Information, Instagram has suffered a serious security leak of its own that could've exposed user's passwords. While Facebook recently had a much more serious problem linked to its "View As" tool that was being actively exploited by... someone, the Instagram issue is linked to its tool that allows users to download a copy of their data.

Facebook notified affected Instagram users that when they utilized the feature, it sent their password in plaintext in the URL. For some reason, these passwords were also stored on Facebook's servers, however the notification said that data has been deleted and the tool was updated so it won't happen now.

Instagram

In a statement to The Information, a spokesperson said the issue only impacted a "small number of people" although if those people were using a shared computer, or on a compromised network then it could've left their account info wide open. If you haven't been notified then your account apparently was unaffected, but it's still a troubling gap left in the hole of security, especially on something as important as passwords. While everyone should be using unique password managers for every site and service (if you need a password manager to keep up with them, then that's the way to go, meanwhile you cna enable two-factor authentication on Instagram as described here), not everyone does and an exposure of this kind is just another troubling episode to hit Facebook.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
494 Shares
Share
Tweet
Share
Save

Popular on Engadget

Engadget's Guide to Privacy

Engadget's Guide to Privacy

View
Popular podcast app Pocket Casts is now available for free

Popular podcast app Pocket Casts is now available for free

View
Amazon’s ‘Lord of the Rings’ series will shoot in New Zealand

Amazon’s ‘Lord of the Rings’ series will shoot in New Zealand

View
Google WiFi successor could include Assistant-enabled beacons

Google WiFi successor could include Assistant-enabled beacons

View
'Dragon Ball Z: Kakarot' arrives on January 17th, 2020

'Dragon Ball Z: Kakarot' arrives on January 17th, 2020

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr