Earlier this year Instagram introduced a Download Your Data tool – a service that was released quite soon after Europe’s General Data Protection Regulation was brought in. As the name suggests, it allows users to download all of the information that Instagram has on them.
Ironically, the privacy-related tool has accidentally revealed the passwords of some Instagram users.
If someone wants to download their data, they can access the entire thing by a URL that links to their personal archive. According to a report from The Information, the passwords for some users were included in the archive URL and stored on Facebook’s servers due to a bug.
Instagram has publicly addressed the issue, stating that only a small amount of users were affected and that the issue has been fixed so it won’t happen again.
A spokesperson for Instagram also told The Verge, “If someone submitted their login information to use the Instagram ‘Download Your Data’ tool, they were able to see their password information in the URL of the page. This information was not exposed to anyone else, and we have made changes so this no longer happens.”
Anyone whose account was affected is said to have already received an email about the issue from Instagram. But as always, if you’re concerned about a privacy or security issue with any of your online accounts – change your password.