Spotify password - Some Spotify users get an email stating that their account password has been reset "due to suspicious activity detected". Unfortunately, the music streaming service does not provide a more detailed explanation.
"As part of our efforts to fight fraudulent activities on our services, we recently notified several users to reset their passwords as a precaution," Spotify spokesman Peter Collins told TechCrunch.
"We encourage users not to use the same password in several different services to protect themselves."
Apparently, Spotify feels that this is a series of credential stuffing, a method when hackers use usernames and passwords that leak from other services and try them on other internet service accounts.
Some users who get this email claim that they use the same password that they use on other services. However, some others use unique passwords for Spotify..
Two people who commented on the Hacker News said that the password they used on Spotify was different from passwords on other services. This raises the suspicion that the attack on Spotify is not using the credential stuffing method.
It is not uncommon for companies to reset user passwords if they feel they are weak or easy to guess. Usually, companies don't store passwords in text form, but they use hashing algorithms to protect passwords.
Even so, companies can still send emails to reset passwords to users who use weak passwords.
Before this, Netflix, Facebook, and Spotify had preventively reset user account passwords after data leaks from other services.
0 Komentar untuk "Spotify password || Spotify Reset User Passwords, Why?"