If the user isn't able to access their Spotify account or reset its password using an email address, then it's necessary to get in touch with Spotify customer support. This option will log the Spotify account off on every device it's logged in on. Finally, after resetting the password and removing unknown apps, users should go back to the 'Settings ' home screen on the website and click on the 'Sign Out Everywhere ' option at the bottom of this page. It's worth noting that 'Apps ' are services or add-ons connected to their Spotify accounts, and they may have access to some of the users' information. From the same 'Settings ' page on the Spotify website, users should also visit the 'Apps ' page and disconnect any unknown app connected to their Spotify account by clicking/tapping on the 'Remove Access ' option next to the app name. All three have denied data breaches.Changing the password may not be enough to secure a Spotify account completely. Spotify did not respond to our follow-up questions.Ĭustomers of Chipotle, DoorDash and OkCupid have all reported account hacks in recent months.

Netflix, Facebook and Spotify too have all proactively reset account passwords in the aftermath of third-party data breaches by obtaining the data set and matching exposed passwords against their databases. By scrambling lists of weak or stolen passwords using the same algorithm, companies can match weak passwords against their own databases and proactively send out password reset emails. Instead, they scramble passwords using a hashing algorithm. Companies typically don’t store user passwords in plaintext. It’s not uncommon for companies to reset user passwords if they believe they are weak or easily guessed. Two people who commented on this Hacker News thread also said their passwords were unique, casting doubt on the veracity of a credential stuffing attack. Some used the same password across different websites and some used passwords unique to Spotify.

We contacted several people who received the email reset message. In other words, Spotify says this is a credential stuffing attack, where hackers take lists of usernames and passwords from other breached sites and brute-force their way into other accounts. As a best practice, we strongly recommend users not to use the same credentials across different services to protect themselves.” When reached, Spotify spokesperson Peter Collins said: “As part of our ongoing maintenance efforts to combat fraudulent activity on our service, we recently shared a communication with select users to reset their passwords as a precaution. Did someone hack in to listen to Justin Bieber or something? Spotify just reset my password due to 'suspicious activity'.

Spotify login password reset