LinkedIn ‘salts’ passwords to prevent future breach

Jun 13, 2012

Social networking website LinkedIn has said it will provide an additional layer of online security to its members following last week’s data breach, while adding that stolen passwords were not published with corresponding email logins.

Salting makes it much harder to crack passwords: Reuters

Some cyber security experts had earlier said LinkedIn did not have adequate protections in place, and warned that the company could uncover further data-losses over coming days as it tries to find out what happened.

Late on Tuesday, the company said all member passwords were now “salted” — a technique that greatly increases the time and computer power needed to crack an encrypted password. (For more on salting read the Wikipedia entry.)

The company, which has more than 160 million members on its site, said there had been no reports of accounts compromised by the mass password theft.

Reuters

Also see

Firstpost encourages open discussion and debate, but please adhere to the rules below, before posting. Comments that are found to be in violation of any one or more of the guidelines will be automatically deleted:

Personal attacks/name calling will not be tolerated. This applies to comments directed at the author, other commenters and other politicians/public figures

Please do not post comments that target a specific community, caste, nationality or religion.

While you do not have to use your real name, any commenters using any Firstpost writer's name will be deleted, and the commenter banned from participating in any future discussions.

Comments will be moderated for abusive and offensive language.

Please read our comments and moderation policy before posting