Facebook staff 'accessed user passwords'
In an interview with the Guardian, Losse said that when she joined Facebook in 2005, customer support staff were each handed a “master password,” which allowed them to log in as any Facebook user and access all their messages and data.
She said that staff needed to have access to accounts in order to manage and repair user issues, claiming that it was common practice at the time for early-stage startups to give their staff access to customers’ personal information.
As many Facebook users use the same password for multiple accounts elsewhere on the internet, this raises significant security concerns. However, Losse admitted that more secure forms of logging in to repair accounts have since been implemented, and Facebook has since confirmed that the social network now has “very, very strict processes” in place to control access to passwords and user information.
