The Slack app on Android accidentally leaked passwords for several users late last year. The company is still sending emails to people who use the app asking them to change their passwords.

From December 21, 2020 to January 21, 2021, the Android version of Slack app stored user data in plain text and email only. This allowed other apps on the affected phone to more easily access the accounts.

A report from Android Police found that Slack representatives confirmed that the email some Android users were receiving to reset their passwords was not a fake email, but rather an email sent by the company. However, the Slack password leak only affected a small percentage of Android users. If you're one of them, Slack will likely notify you to reset your password.

Step by step guide to resetting your Slack password

O Slack is asking users to change their passwords and set a stronger password to prevent leaks. If you received an email, you will have a link redirecting you to reset your password. To do this manually, go to your Slack profile, click More > Account Settings.

The recommendation is to update the application to latest version of Slack on Google Play. Affected users have been asked to clear their apps in order to get rid of the logs, where their login credentials are available in plain text. However, while Slack has stated that it has already invalidated the logged password, users should delete the log from their phone especially if they have also used the same password for other websites, to avoid leaking it.

To do this, go to your phone's Settings and select Apps. Navigate to Slack (and other apps as well) and select Clear Storage or Clear Data in Storage. Click OK to confirm that you want to permanently clear your data.

Through which channels you reach those people, classic and out of the box. Goodies.