Save big now! Microsoft has Surface Laptop 3 discounted by $400

  • Forums
  • Shop
  • Best Laptops
  • Best Graphics Cards
  • Best Motherboards
  • Best Antivirus
  • Best VPN
  • Dell XPS 13 Deals
  • PC Parts Deals
Ruh Roh

Twitter asks users to change passwords after bug exposed them on internal log

The bug in Twitter's hashing process has since been fixed.
Dan Thorp-Lancaster
3 May 2018

Twitter asks users to change passwords after bug exposed them on internal log

Twitter today asked all of its users to consider changing their passwords after discovering a bug that caused them to be stored "unmasked in an internal log."

According to Twitter, the bug has been corrected and it has seen "no indication of breach or misuse by anyone" after an investigation.

We recently found a bug that stored passwords unmasked in an internal log. We fixed the bug and have no indication of a breach or misuse by anyone. As a precaution, consider changing your password on all services where you've used this password. https://t.co/RyEDvQOTaZ

— Twitter Support (@TwitterSupport) May 3, 2018

The bug itself is related to the hashing function Twitter uses to mask passwords. Twitter says passwords were written to an internal log before the hashing process was completed, leaving them exposed. From Twitter:

We mask passwords through a process called hashing using a function known as bcrypt, which replaces the actual password with a random set of numbers and letters that are stored in Twitter's system. This allows our systems to validate your account credentials without revealing your password. This is an industry standard.

Due to a bug, passwords were written to an internal log before completing the hashing process. We found this error ourselves, removed the passwords, and are implementing plans to prevent this bug from happening again.

Out of caution, Twitter users should reset their password for the service, as well as those for any services using the same password. Now would also be a good time to start using two-factor authentication if you aren't already.

How to change your Twitter password

Expect new content for Age of Empires 2 and 3 Definitive Editions soon
Long live AoE

Expect new content for Age of Empires 2 and 3 Definitive Editions soon

Microsoft and its studio partners aren't letting Age of Empires fade away. New content for Age of Empires 2 and 3 DE is planned, some sooner than later.

Age of Empires 4 devs talk about their vision of a true Age 2 successor
Your Next History Teacher

Age of Empires 4 devs talk about their vision of a true Age 2 successor

We now have a whole lot more information about Age of Empires 4, and we sat down with three developers to further discuss some of the details about the next big RTS game.

Review: HP ENVY 14 brings premium features to a fantastic creator's laptop
Few are like it

Review: HP ENVY 14 brings premium features to a fantastic creator's laptop

For creative professionals who want a Windows 10 PC, you have the choice of 13-inch Ultrabooks with no NVIDIA GPU or honking big 15-inch laptops that are not so fun to use on planes or to carry. The new HP ENVY 14 looks to solve that, and it does so with outstanding results. This $1,260 laptop should be on your short list.

These tools will help you keep your PC's drivers updated
shut up and drive

These tools will help you keep your PC's drivers updated

Windows 10 does a good job of updating your PC's drivers, but third-party tools can help you clean up and optimize your system. Here are the best tools to keep your Windows 10 PC's drivers up to date.

Keep in Touch

Sign up now to get the latest news, deals & more from Windows Central!

I would like to receive news and offers from other Future brands.

I would like to receive mail from Future partners.

No spam, we promise. You can unsubscribe at any time and we'll never share your details without your permission.

  • Apps
  • Twitter
  • Windows 10
  • Laptops
  • Surface
  • Reviews
  • Gaming & Xbox
  • How To
  • Forums
  • Deals
  • PC Components

Other Categories

  • About Us
  • Licensing and Reprints
  • Advertise
  • Newsletter
  • Windows Central Merch
  • Accessibility Statement
  • Android Central
  • iMore
  • CrackBerry
  • Thrifter
  • TechnoBuffalo
  • MrMobile
Log in or Sign up
  • t
  • f
  • p
  • i
  • r

Brightness

  • © Future US, Inc.
  • Terms & Conditions
  • Privacy Policy
  • Cookie Policy
  • Careers
  • Licensing
  • External Links Disclosure
  • Accessibility Statement
  • © Future US, Inc.
  • Terms & Conditions
  • Privacy Policy
  • Cookie Policy
  • Careers
  • Licensing
  • External Links Disclosure
  • Accessibility Statement