PDA

View Full Version : Your Facebook Account has Three Passwords


swami
May 2nd, 2012, 12:58 AM
How safe is FaceBook ?

Do you know that you can log into your Facebook account using three different passwords? Just change the case of your main password to get the new one!

http://img.labnol.org/files/facebook-password.jpg

This is interesting. You can log into your Facebook account using three passwords – one is the main password that you created and the other passwords can be constructed by toggling the case of characters that form your original password.
For example, if your Facebook password is operati@nGeronimo!, you can convert the uppercase characters to lowercase (and vice-versa) and the toggled password string – OPERATI@NgERONIMO! – will also get you into Facebook.

There’s another variation as well. If the first character of your Facebook password is in small case, just change that character to upper case – like Operati@nGeronimo! - and Facebook will gladly let you in.

You may try these variations with your own password on the Facebook login screen available at facebook.com/login.php.

A Stack Exchange thread pointed me to this ZDNet story that explains why Facebook allows users to login through multiple passwords. According to Facebook:

We accept three forms of the user’s password to help overcome the most common reasons that authentic logins are rejected. In addition to the original password, we also accept the password if a user inadvertently has caps lock enabled or their mobile device automatically capitalizes the first character of the password.

Thus, if you have accidentally enabled CAPS Lock on the keyboard, the toggled password would still work on Facebook.

Link (http://www.labnol.org/internet/facebook-account-passwords/21241/)

Napolean
May 3rd, 2012, 07:23 AM
This is interesting but doesn't it make hackers' job easier?

swami
May 3rd, 2012, 07:27 AM
Thats what I asked in my first post "How safe is FaceBook ?"

This is interesting but doesn't it make hackers' job easier?

kkkk
May 3rd, 2012, 08:41 AM
as long as its only certain case combinations that are allowed, how does this make a hackers job easier?

nathulal
May 7th, 2012, 02:35 PM
facebook thy name is shitbook :down:

playing with people life and security and privacy,facebook hi hi