loader gif

Google Has Stored Some Passwords in Plaintext Since 2005

Google Has Stored Some Passwords in Plaintext Since 2005 (Breaches and Incidents)

It happened again: Google announced today that it's the latest tech giant to have accidentally stored user passwords unprotected in plaintext. But a bug in G Suite's password recovery feature for administrators caused unprotected passwords to be stored in the infrastructure of a control panel, called the admin console. Twitter and Facebook have dealt with plaintext password bugs of their own in the past 18 months. Google is in the process of notifying G Suite administrators, and says that it will also automatically reset any impacted passwords that haven't already been changed. The company discovered the bug in April, and an additional plaintext password bug in May during the course of its investigation. Since all impacted passwords that haven't already been changed will be auto-reset by Google, you should focus on adding two-factor authentication to your G Suite account if you don't already have it—and maybe cross your fingers that these passwords went unnoticed for 14 years.

loader gif