As Facebook has revised its privacy in early 2019, the company is still struggling to get used to a “Privacy” culture. Kevin Poulson who reported to Daily Beast on April 2 that some Facebook users have asked to provide both email and password.

A blog post had been published today which showed a huge amount of Facebook email and password were publicly available on AWS (Amazon servers).

The email password trick was first spotted by a software developer and information security expert who tweets by the handle “e-sushi”:

Hey @facebook, demanding the secret password of the personal email accounts of your users for verification, or any other kind of use, is a HORRIBLE idea from an #infosec point of view. By going down that road, you're practically fishing for passwords you are not supposed to know! pic.twitter.com/XL2JFk122l

— e-sushi (@originalesushi) March 31, 2019

These requests are used to verify your email but Facebook is storing your email and password.

Facebook continue to have privacy problems. And this tactic can put a huge number of email and passwords in open space.