Facebook Passwords Are Not Case sensitive, Accepts Three Passwords

This is really strange but interesting. You can use sign in to your Facebook account by using three passwords. One password is selected by you. But other two passwords are generated by Facebook.

Actually you do not need to think more on this. Other passwords are simple and can be generated by toggling the case of characters in your original account password.

If your Facebook password is  operati@nGeronimo! , you can toggle the case to get the second password. And the other password will be  OPERATI@NgERONIMO!  .

There is one more variation of the password. If the first character of your Facebook password is in small case, you can convert it to upper case to get the new password which will be  Operati@nGeronimo! .

You can give these new password a try on Facebook login screen.

Now, most of you are thinking behind the reason for this. Actually Facebook has done this for overcoming the most common problem which is your caps lock. If your caps lock is on then your password will automatically turned to 2nd variant. Thus, if you have accidentally enabled CAPS Lock on the keyboard, the toggled password would still work on Facebook.

Now what about the third? This is to overcome sign in problems while using mobile devices. Generally, when typing on mobile devices, first character automatically turns to capital letter. So the third variant is for that. So it also accepts if you typed the first letter as capital letter.

“Nothing is more important to us than the security of our users and their information,” a Facebook spokesperson said in a statement to ZDnet. “Our passwords are not case insensitive. We accept three forms of the user’s password to help overcome the most common reasons that authentic logins are rejected. In addition to the original password, we also accept the password if a user inadvertently has caps lock enabled or their mobile device automatically capitalizes the first character of the password. We feel this does not significantly impact the security of the user’s password or their account. Additionally, we do not store our passwords in plain text we use several encryption technologies and techniques to maintain the security of our information.”

This is not new but i also noticed it after reading a nice post on Digital Inspiration.