Twitter is recommending its users to immediately change their passwords after the company discovered a bug that stored passwords in plain text in an internal system.
Although the company said there is no evidence passwords have been leaked or misused, it is urging its users to update their passwords as a precaution. On their blog, Twitter said:
When you set a password for your Twitter account, we use technology that masks it so no one at the company can see it. We recently identified a bug that stored passwords unmasked in an internal log. We have fixed the bug, and our investigation shows no indication of breach or misuse by anyone.
Out of an abundance of caution, we ask that you consider changing your password on all services where you’ve used this password. You can change your Twitter password anytime by going to the password settings page.
Twitter notes that it currently has no reason to believe password information ever left Twitter’s system or that these unprotected passwords were accessed by hackers, but the risk of the unknown remains.
Also, Twitter noted that hackers may utilize this current situation by inciting you to panic and letting the hackers have your password via email. Twitter states that:
If you receive any email about the need to change your password, even if it’s from Twitter. Please don’t click any links inside the email