<story><title>Passwords For Your Facebook Account</title><url>http://www.labnol.org/internet/facebook-account-passwords/21241/</url><text></text></story><parent_chain><item><author>tomkinstinch</author><text>This raises several questions:&lt;p&gt;Have they always done this, or is this new?&lt;p&gt;For those of us who haven&apos;t changed our Facebook password in years, does this mean that we don&apos;t get this option, or do we? And if we do, is Facebook storing our passwords in plaintext?</text></item></parent_chain><comment><author>raquo</author><text>You don&apos;t need to store the password in plaintext, you can just capture the password from a successful login attempt and generate new acceptable hashes from different variations of it. That way you&apos;d gradually add this feature for most of the active accounts.</text></comment>
<story><title>Passwords For Your Facebook Account</title><url>http://www.labnol.org/internet/facebook-account-passwords/21241/</url><text></text></story><parent_chain><item><author>tomkinstinch</author><text>This raises several questions:&lt;p&gt;Have they always done this, or is this new?&lt;p&gt;For those of us who haven&apos;t changed our Facebook password in years, does this mean that we don&apos;t get this option, or do we? And if we do, is Facebook storing our passwords in plaintext?</text></item></parent_chain><comment><author>mille562</author><text>They are probably still storing hashed passwords.  It would require hashing your login attempt 3 times: 1) exactly you typed it 2) forcing first character to be lower case 3) inverting the case of all letters.</text></comment>