Facebook acknowledged that it left hundreds of millions of user passwords unencrypted and readable by its employees for years, the admission coming after a security researcher found and disclosed it. Facebook said there’s no evidence employees abused access to the passwords, and that they were stored on internal servers so they couldn’t be accessed from those outside the company. The social media giant said it discovered the problem in January, with the passwords having been unintentionally stored in several circumstances, such as when an app crashed and the crash log included a password. Some security experts are advising that Facebook users should change their passwords to be safe.
