Instagram security flaw potentially exposed passwords in website URLs

Joanna Estrada
November 18, 2018

Instagram users have been asking for a way to view all the data the company has on them, but this may be more than they were hoping for. Instagram now says the issue is fixed.

Instagram suffered a temporary outage for Android users on Saturday, briefly leaving the site inaccessible to mobile users.

At least one user reported that logging on led to a blank white screen. Additionally, the social network claims it has already resolved the bug. If you haven't been notified then your account apparently was unaffected, but it's still a troubling gap left in the hole of security, especially on something as important as passwords.

The glitch is the second for Instagram this week. The new Download Your Data tool that allows users to receive that information may have left some users' passwords exposed. Instagram reportedly told its users on Thursday that the platform's "Download Your Data" tool put their passwords at risk by including them in the URLs of their browsers.

An Instagram spokesperson said that only a "small number of people" were affected. It also deleted the login details and updated the tool. "This information was not exposed to anyone else, and we have made changes so this no longer happens".

Other reports by Click Lancashire

Discuss This Article

FOLLOW OUR NEWSPAPER