Slack for Android Could Have Exposed Your Password: Here’s How to Reset
Slack reportedly sent some Android users an email urging them to reset passwords.
Advertisement
By Tanishka Sodhi | Updated: 11 February 2021 15:07 IST
Highlights
Slack’s Android app was logging in users’ passwords in plain text
This means other apps could have had access to the credentials
Slack’s issue reportedly went on from December 21 to January 21
The issue was fixed on January 21, 2021, as per an email sent by Slack
Slack's Android app was accidentally logging in users' credentials in plain text, as per a report. The company has now reportedly been emailing people who use Slack for Android, requesting them to rest their passwords. From December 21, 2020, till January 21, 2021, the Android version of the Slack app stored users' credentials in plain text, according to the email. This means that other apps on the affected phone could have access to the credentials. You should wipe your Slack app's data as well, especially if you use the same password for other sites and apps.
As per a report by Android Police, Slack representatives confirmed that the email some Android users were receiving to reset passwords was not a phishing email and was sent by the company. However, the issue seems to have impacted only a small subset of Android users. If you were one of them, Slack will likely notify you to reset your password, via email.
According to the email sent out by Slack, the issue was identified on January 20, 2021, and fixed on January 21, 2021. Slack is urging users to change their passwords and set a ‘complex and unique' password. If you've received an email, it will have a link redirecting you to reset the password. To manually do it, go to your profile on Slack, click on More > Account Settings.
Android users are encouraged to update to the latest version of Slack from Google Play. Affected users were asked to wipe their Android app's data, in order to get rid of the logs, where your login credentials are available in plain text. While Slack said that it had already invalidated the logged password, users should especially delete the log from the phone if they have used the same password for other sites as well.
To do this, go to your phone's Settings and select Apps. Navigate to Slack (this will likely be in Other apps) and select Clear storage or Clear data in Storage. Click on OK to confirm that you want to permanently clear your data.
What will be the most exciting tech launch of 2021? We discussed this on Orbital, our weekly technology podcast, which you can subscribe to via Apple Podcasts, Google Podcasts, or RSS, download the episode, or just hit the play button below.
Affiliate links may be automatically generated - see our ethics statement for details.
Slack Rolling Out ‘Mark as Read’ Option in Notifications for Its Android App14 May 2025
Search
