Twitter is encouraging all of its 330+ million users to change their passwords. The company announced that they recently discovered a bug which affected their hashing of user passwords. The bug allowed for an unspecified number of user passwords to be recorded in plain text to an internal log prior to hashing. Twitter claims they did not find evidence that this error led to user passwords being misused, but is urging users to change their passwords anyway out of an abundance of caution.

If you are a Twitter user, we strongly recommend that you follow the company’s advice and do the following:

  1. Change your password on Twitter and on any other service where you may have used the same password.
  2. Use a strong password that you don’t reuse on other websites. (Our password generator can create a strong password as long as 512 characters)
  3. Enable login verification, also known as two factor authentication (2FA). This is the single best action you can take to increase your account security.
  4. Use a password manager to make sure you’re using strong, unique passwords everywhere.

Get RoboForm Free

Simon Davis Avatar

Simon Davis

VP of Marketing

VP of Marketing at RoboForm, where he has worked since 2006. Over nearly two decades in the password management industry, Simon has authored dozens of articles on password security and digital identity, and has appeared as a guest on podcasts, YouTube programs, radio, and other media. His perspective is grounded in direct experience with how millions of individuals, families, and businesses use a password manager every day. Based in the Washington, D.C. area.

Areas of Expertise: Password security, passwordless authentication, password manager best practices, cybersecurity marketing
LinkedIn
Fact Checked & Editorial Guidelines
Reviewed by: Subject Matter Experts

Posted by Simon Davis

VP of Marketing at RoboForm, where he has worked since 2006. Over nearly two decades in the password management industry, Simon has authored dozens of articles on password security and digital identity, and has appeared as a guest on podcasts, YouTube programs, radio, and other media. His perspective is grounded in direct experience with how millions of individuals, families, and businesses use a password manager every day. Based in the Washington, D.C. area.

All Posts Website