Google stored G Suite passwords in plaintext for almost 15 years, the cloud giant acknowledged on Tuesday evening. Google said that it recently discovered the passwords for a subset of enterprise G Suite customers stored in plain text since 2005. The best security practice is to store passwords with cryptographic hashes that mask those passwords to ensure their security. The full extent of a security faux pas like this for years to come is still unknown, Jumio’s Robert Prigge said. Google is only the latest conglomerate tech company to find itself in hot water due to how it stores passwords.
Source: https://threatpost.com/google-stored-passwords-in-plaintext/144967/