Connecting to sites using Facebook login - How secure is this?

dilallio

I spotted a deal on Sunday in the Bargain Alerts forum, which involved me purchasing a deal from www.collegebudget.com, after logging on using my facebook id.

Yesterday, my Facebook was hacked from a location in Hungary.

I have run a full scan of my laptop using both Microsoft Security Essentials and MalwareBytes, and both report that my laptop is clean.

I use long passwords comprising of Uppercase & lowercase letters, combined with numbers and special characters, so it's highly unlikely that my password was reproduced using a password generator. This password was different to all my other passwords, so it's also unlikely that it was a phishing attempt.

I am wondering if I sign onto other sites using my Facebook login, do these sites have access to my password? I wouldn't have thought so, but I'm not sure now.

Cheers, dilallio

m99T

There are fake Facebook logins out there but if when you are entering your password its on a HTTPS connection it is always secure.

BrianD

You need to check the T&C's of the site in question. What are you doing with your Facebook Credentials. Some sites use FB login for registration on their sites which also means that the info requested e.g. name and email is stored on their servers. If they aren't secure neither is your info.

It's important that you both access the site when you use FB login because what you are doing is permissioning FB to provide your data to a third party. However, your password never be passed over. Any of your other accounts hacked? HAve you weak passwords or passwords used across different services?

There will be some sites that are phishing. Look before you click!