The first and best way is to choose unique passwords for all of your accounts. Anyone who gets hold of one of your passwords isn’t going to be able to do anything with it, because it won’t work on any other sites.
We’ve shown you all sorts of ways to come up with strong passwords. And using a tool like LastPass’s password generator (pictured above) will give you nearly-uncrackable passwords. The top 10 passwords from AdultFriendFinder were as follows:
- 123456
- 12345
- 123456789
- 12345678
- 1234567890
- 1234567
- password
- qwerty
- qwertyuiop
These ten passwords were in use by almost three million accounts, with “123456” making up over 900,000 of those. It’s embarrassing.
Come On, People
Our entire lives are online, and in many cases, they’re protected by little more than a single password. The companies we entrust our data to aren’t doing a good job of protecting it. We’re putting too much faith in them, and we’re not putting in the effort to create backstops. This just shouldn’t be happening anymore.
Hackers are out there, and they’re not going to go away. In fact, they’re only going to use more sophisticated methods to wreak havoc. We need to start demanding better protection from providers, and we need to take steps to protect ourselves.
Have you been affected by this data breach? Even if you’re not, will you reconsider your personal online security because of it? Share your thoughts in the comments below!
Follow MUO
AdultFriendFinder, which calls itself “the world’s largest sex and swinger community,” got hit, and over 410 million account details, including email addresses and passwords, have been posted online. It’s one of the largest breaches of all time.
Less than 18 months ago, the extramarital-affair-enabling website Ashley Madison had a huge data breach. Data from over 30 million accounts was posted online, and there was a flurry of shaming and finger-pointing all over the internet. You’d new york sugar daddy websites think the industry would have learned.
Alas, it did not. A similar website, AdultFriendFinder, which calls itself “the world’s largest sex and swinger community,” got hit, and over 410 million account details, including email addresses and passwords, have been posted online. It’s one of the largest breaches of all time.
What Happened This Time?
In October, AdultFriendFinder and multiple sister sites (including Cams and Penthouse) were attacked. Websites under the control of Friend Finder Networks, the parent company, were vulnerable to a type of attack called local file inclusion. This attack gave hackers access to a number of Friend Finder databases, including billing information, member lists, and chat logs.
Friend Finder was also hacked last year, and the details of four million accounts was released. It appears they didn’t upgrade their security. This attack is much, much worse.
Among the information posted online were email addresses and passwords that hadn’t been securely encrypted, meaning that hackers could actually see plain text details. Obtaining an encrypted password won’t do an attacker much good, but actually obtaining email addresses and passwords not only compromises the identity of users, but also opens them to further attacks.
Adding insult to injury, a lot of deleted accounts — potentially up to 15 million — still had their information stored on the servers. So even people who had deleted their Friend Finder accounts may have been compromised. Some outlets are reporting that 20 years of data was released.
What You Need to Know
There may also be others that we’re not aware of yet. If you have an account on any of these sites, or if you’ve ever had an account, it’s best to assume that your information has been compromised. Unless you’ve been in the habit of using unique, strong passwords for a long time, you should change all of your other account passwords. Now.