<story><title>Passwords For Your Facebook Account</title><url>http://www.labnol.org/internet/facebook-account-passwords/21241/</url><text></text></story><parent_chain><item><author>tomkinstinch</author><text>This raises several questions:&lt;p&gt;Have they always done this, or is this new?&lt;p&gt;For those of us who haven&apos;t changed our Facebook password in years, does this mean that we don&apos;t get this option, or do we? And if we do, is Facebook storing our passwords in plaintext?</text></item></parent_chain><comment><author>raquo</author><text>You don&apos;t need to store the password in plaintext, you can just capture the password from a successful login attempt and generate new acceptable hashes from different variations of it. That way you&apos;d gradually add this feature for most of the active accounts.</text></comment>
<story><title>Passwords For Your Facebook Account</title><url>http://www.labnol.org/internet/facebook-account-passwords/21241/</url><text></text></story><parent_chain><item><author>tomkinstinch</author><text>This raises several questions:&lt;p&gt;Have they always done this, or is this new?&lt;p&gt;For those of us who haven&apos;t changed our Facebook password in years, does this mean that we don&apos;t get this option, or do we? And if we do, is Facebook storing our passwords in plaintext?</text></item></parent_chain><comment><author>masterzora</author><text>Rather than asking questions I tried some science.  Last time I changed my FB password was roughly 6 months ago and I am only able to get the correct-case password to allow access.  I&apos;m not too inclined to spend much more time on this but surely someone who hasn&apos;t changed their password in a while can try it out.  They can see if the alternate casings work, change their password and see if they work then, etc.</text></comment>