Recently I logged into my Facebook account and then noticed that my caps lock was on. So I tried to log in again with and without capslock on. I got in both times. Then I tried to log in with the first letter of my password in uppercase and the rest in lowercase. Again, I got in. How is this even possible? Does Facebook keep a cookie for the password or something?
I don't think there are any cookies per your question. It is likely that the password hashing and storage is as standard as you would expect. The alternate passwords are probably generated from the password submitted, via the login form, and not stored as alternates on the back end.
That said, you might not have a strong and unique Facebook password. Maybe a reshuffled spelling of your name is the key to your account. But if it's not strong, there's a chance that someone could be trying to breach your Facebook account. In which case, it's probably time to change your password.
Recently I begrudgingly created a Facebook account after receiving an invite to a group that is work related and I couldn't really say no. Everything was working fine but I decided to change my password and since then it has been a pain to log in using 1Password. Every time I try it tells me the password was updated and it's not accepting the password from the browser extension but if I go and copy the password from the main application it works fine.
The strange thing is that I can press on the anchor symbol and copy it from the browser extension which works. It just won't log in normally and tells me I have used an old password, so it feels like a bug in 1Password that is not updating the password properly.
I'm sorry you're having trouble with your Facebook Login item! If it works when you copy & paste your login credentials, but not when you have the extension fill them for you, please try manually saving a new Login for that site. Does the new Login item work correctly?
@Drew_AG I actually tried that before and it updated the existing login within 1Password itself, however those changes are never carried back to the browser extension when attempting a normal login. It's perplexing because if I copy them manually from the browser extension it's correct.
The steps to manually save a new Login won't update an existing Login item - instead, they'll have you create a brand new Login item for that site, completely separate from the original Login item (although they'll both have your same login credentials, of course). This can be useful for logins that have stopped working correctly. Saving a new Login item allows 1Password to refresh everything it "knows" about the page.
Can you please follow the steps from that link to create a new Login item in 1Password for that Facebook account? Once you do that, refresh the login page, then try to have 1Password fill your info using the new Login item you just created. Does that make a difference?
I've never had a problem before across hundreds of websites and changed the password on many of them. It's still a mystery why 1Password was continuing to insert an old password, even though it had clearly updated inside the main application. Chances are it won't happen again.
Since this particular issue is resolved, I'll close this thread, but if you have any further questions or concerns, please don't hesitate to open a new thread, or email us directly at suppor...@agilebits.com.
The Facebook source said the investigation so far indicates between 200 million and 600 million Facebook users may have had their account passwords stored in plain text and searchable by more than 20,000 Facebook employees. The source said Facebook is still trying to determine how many passwords were exposed and for how long, but so far the inquiry has uncovered archives with plain text user passwords dating back to 2012.
Both Github and Twitter were forced to admit similar stumbles in recent months, but in both of those cases the plain text user passwords were available to a relatively small number of people within those organizations, and for far shorter periods of time.
Well, I think it is difficult to quit Facebook. We all depend on it for most of the things, especially when you are running some business or you are an influencer. So, I think quitting Facebook is not a good idea. If you want to be secure and want to protect your data then you should choose your password wisely.
Wow Facebook has been bad at security for a long time: I feel like every month we learn something bad about Facebook, but their stocks are not affected. It is like we are now immune or come to an acceptance that they will fail at protecting our privacy. other companies get one bad news and their stocks take a dive but not Facebook.
I received a message from facebook telling my password had been one of the many recorded. I do believe what they are telling us in the press release is outer balls. Something else bigger is going on, someone has just leaked the information, now they are trying to cover it up.
According to recent reports, employers are beginning to ask prospective employees for their Facebook passwords as part of the interview process before they are hired. In one case, the Associated Press reported a statistician was asked for his Facebook user name and password so that the employer could review private components of his profile as part of the interview process for the job he was applying for. At least two other cases were identified where individuals who were applying for jobs were required to turn over Facebook passwords and user names in order to be considered for the job they were applying for, as well as a city that, until recently, required job applicants to provide access to their email accounts.
In their letter to the EEOC, Blumenthal and Schumer specifically raised concerns that by requiring applicants to provide login credentials to social networking sites, employers will have access to private, protected information that may be impermissible to consider when making hiring decisions and may be used to unlawfully discriminate against otherwise qualified applicants. Blumenthal and Schumer both made clear that comprehensive background checks for individuals are sometimes needed when seeking employment in law enforcement, at highly sensitive infrastructure sites, and with jobs where there is significant access to vulnerable populations. The senators pointed out, however, that requiring prospective employees turn over Facebook and social media user names and passwords, essentially granting access to private information that is not otherwise made public, could very well give employers information they otherwise cannot ask about, such as religion, age, marital status, pregnancy status, and a host of other protected classes that employers are not permitted to ask about or make hiring decisions based on.
Blumenthal and Schumer also announced that they are currently drafting legislation that would seek to fill any gaps in federal law that allow employers to require personal login information from prospective employees to be considered for a job. The senators noted they are seeking additional legal opinions, from both the EEOC and DOJ to determine what protections currently exist and what additional protections are necessary.
The senators noted that the new practice represents a grave threat to personal privacy and said that a federal investigation is warranted to determine whether the practice violates federal law. They argued that given the past case law, it would appear that the practice is a violation of personal privacy.
We write concerning reports in the media that some employers are requiring job applicants to provide their usernames and passwords to social networking sites like Facebook as part of the hiring process.
We urge the DOJ to investigate whether this practice violates the Stored Communication Act or the Computer Fraud and Abuse Act. The SCA prohibits intentional access to electronic information without authorization or intentionally exceeding that authorization, 18 U.S.C. 2701, and the CFAA prohibits intentional access to a computer without authorization to obtain information, 18 U.S.C. 1030(a)(2)(C). Requiring applicants to provide login credentials to secure social media websites and then using those credentials to access private information stored on those sites may be unduly coercive and therefore constitute unauthorized access under both SCA and the CFAA.
We write concerning reports in the media that some employers are requiring job applicants to provide their usernames and passwords to social networking sites like Facebook as part of the hiring process. By requiring applicants to provide login credentials to social networking and email sites, employers will have access to private, protected information that may be impermissible to consider when making hiring decisions. We are concerned that this information may be used to unlawfully discriminate against otherwise qualified applicants.
Facebook and other social networks allow users to control what information they expose to the public, but potential employers using login credentials can bypass these privacy protections. This allows employers to access private information, including personal communications, religious views, national origin, family history, gender, marital status, and age. If employers asked for some of this information directly, it would violate federal anti-discrimination law. We are concerned that collecting this sensitive information under the guise of a background check may simply be a pretext for discrimination.
When you use your PayPal account to process transactions using Facebook, Facebook will sign you up for Automatic payments with them. This is why you are not prompted for your password each time. If you want to cancel this, please click here.
I have the same problem but when I click your link it says the page is no longer available. I tried Paypal customer service but apparently 10.30 in the morning is outside their opening hours. Any ideas? cheers Pete
b1e95dc632