4 Ways to Crack a Facebook Password & How to Protect Yourself from Them « Null Byte :: WonderHowTo

Despite the security concerns that have plagued Facebook for years, most people are sticking around and new members keep on joining. This has led Facebook to break records numbers with over1.94 billion monthly active users, as of March 2017 — and around 1.28 billion daily active users.We share our lives on Facebook. We share our birthdays and our anniversaries. We share our vacation plans and locations. We share the births of our sons and the deaths of our fathers. We share our most cherished moments and our most painful thoughts. We divulge every aspect of our lives. Clinical psychologists have written entirebooks detailing the surprisingly extensive impact Facebook hason our emotions and relationships.But we sometimes forget who's watching.We use Facebook as a tool to connect, but there are those people who use that connectivity for malicious purposes. We reveal what others can use against us. They know when we're not home and for how long we're gone. They know the answers to our security questions. People can practically steal our identities — and that's just with the visible information we purposely give away through our public Facebook profile.Image viaDigital TrendsThe scariest part is that as we get more comfortable with advances in technology, we actually become more susceptible to hacking. As if we haven't already done enough to aid hackers in their quest for our data by sharing publicly, those in the know can get into our emails and Facebook accounts to steal every other part of our lives that we intended to keep away from prying eyes.In fact, you don't even have to be aprofessional hackerto get into someone's Facebook account.It can be as easy asrunning Firesheep on your computerfor a few minutes. In fact, Facebook actually allows people to get into someone else's Facebook account without knowing their password. All you have to do is choose three friends to send a code to. You type in the three codes, and voilà — you're into the account. It's as easy as that.In this article I'll show you these, and a couple other ways that hackers (and even regular folks) can hack into someone's Facebook account. But don't worry, I'll also show you how to prevent it from happening to you.Method 1: Reset the PasswordThe easiest way to "hack" into someone's Facebook is through resetting the password. This could be easier done by people who are friends with the person they're trying to hack.The first step would be to get your friend's Facebook email login. If you don't already know it, try looking on their Facebook page in the Contact Info section. Still stuck? Hackers use scraping tools like TheHarvester to mine for email addresses,so check out our guide hereto find a user's email that you don't already know.Next, click onForgotten your password?and type in the victim's email. Their account should come up. ClickThis is my account.It will ask if you would like to reset the password via the victim's emails. This doesn't help, so pressNo longer have access to these?It will now askHow can we reach you?Type in an email that you have that also isn't linked to any other Facebook account.It will now ask you a question. If you're close friends with the victim, that's great. If you don't know too much about them, make an educated guess. If you figure it out, you can change the password. Now you have to wait 24 hours to login to their account.If you don't figure out the question, you can click onRecover your account with help from friends. This allows you to choose between three and five friends.It will send them passwords, which you may ask them for, and then type into the next page. You can either create three to five fake Facebook accounts and add your friend (especially if they just add anyone), or you can choose three to five close friends of yours that would be willing to give you the password.How to Protect YourselfUse an email address specifically for your Facebook and don't put that email address on your profile.When choosing a security question and answer, make it difficult. Make it so that no one can figure it out by simply going through your Facebook. No pet names, no anniversaries — not even third grade teacher's names. It's as easy as looking through a yearbook.Learn about recovering your account from friends. You can select the three friends you want the password sent to. That way you can protect yourself from a friend and other mutual friends ganging up on you to get into your account.Method 2: Use a KeyloggerSoftware KeyloggerA software keylogger is a program that can record each stroke on the keyboard that the user makes, most often without their knowledge. The software has to be downloaded manually on the victim's computer. It will automatically start capturing keystrokes as soon as the computer is turned on and remain undetected in the background. The software can be programmed to send you a summary of all the keystrokes via email.Null Byte features an excellent guide onhow to get a keylogger on a target computerto get you started. If this isn't what you're looking for, you can search for free keyloggers ortry coding a basic keylogger yourselfin C++.Hardware KeyloggerThese work the same way as the software keylogger, except that a USB drive with the software needs to be connected to the victim's computer. The USB drive will save a summary of the keystrokes, so it's as simple as plugging it to your own computer and extracting the data.There are several options available for hardware keyloggers.Wired keyloggers like the Keyllamacan be attached to the victim's computer to save keystrokes and works on any operating system — provided you have physical access to retrieve the device later. If you're looking to swipe the passwords remotely, you can invest in apremium Wi-Fi enabled keyloggerwhich can email captured keystrokes or be accessed remotely over Wi-Fi.How to Protect YourselfUse a firewall. Keyloggers usually send information through the internet, so a firewall will monitor your computer's online activity and sniff out anything suspicious.Install a password manager. Keyloggers can't steal what you don't type. Password mangers automatically fill out important forms without you having to type anything in.Update your software. Once a company knows of any exploits in their software, they work on an update. Stay behind and you could be susceptible.Change passwords. If you still don't feel protected, you can change your password bi-weekly. It may seem drastic, but it renders any information a hacker stole useless.Method 3: PhishingThis option is much more difficult than the rest, but it is also the most common method to hack someone's account. The most popular type ofphishinginvolvescreating a fake login page. The page can be sent via email to your victim and will look exactly like the Facebook login page. If the victim logs in, the information will be sent to you instead of to Facebook. This process is difficult because you will need to create a web hosting account and a fake login page.The easiest way to do this would be tofollow our guide onhow to clone a websiteto make an exact copy of the facebook login page. Then you'll just need to tweak the submit form to copy / store / email the login details a victim enters. If you need help with the exact steps, there aredetailed instructions availableby Alex Long here on Null Byte. Users are very careful now with logging into Facebook through other links, though, and email phishing filters are getting better every day, so that only adds to this already difficult process. But, it's still possible, especially if youclone the entire Facebook website.How to Protect YourselfDon't click on links through email. If an email tells you to login to Facebook through a link, be wary. First check the URL (Here's a great guide on what to look out for). If you're still doubtful, go directly to the main website and login the way you usually do.Phishing isn't only done through email. It can be any link on any website / chat room / text message / etc. Even ads that pop up can be malicious. Don't click on any sketchy looking links that ask for your information.Use anti-virus & web security software, like Norton or McAfee.Method 4: Man in the Middle AttackIf you can get close to your target, you can trick them into connecting to a fake Wi-Fi network tosteal credentials via a Man In The Middle (MITM) attack. Tools like theWi-Fi Pumpkinmake creating a fake Wi-Fi network is as easy as sticking a$16 Wireless Network Adapteronthe $35 Raspberry Piand getting close to your target. Once the victim connects to your fake network, you can inspect the traffic or route them to fake login pages. You can even set it to only replace certain pages and leave other pages alone.This little computer can create an evil AP - a cloned wireless network to trick the user into connecting so you can listen in on their traffic.Image by SADMIN/Null ByteGet Hacking:How to Set Up Kali Linux on the Raspberry PiHow to Protect YourselfDon't connect to any open (unencrypted) Wi-Fi Networks.Especially don't connect to any Wi-Fi networks that are out of place. Why might you see a "Google Starbucks" when there's no Starbucks for miles? Because hackers know your phone or computer will automatically connect to it if you have used a network with the same name before.If you have trouble connecting to your Wi-Fi, look at your list of nearby networks to see if there are any copies of your network name nearby.If your router asks you to enter the password for a firmware update to enable the internet or shows you a page with major spelling or grammar errors, it is likely you're connected to a fake hotspot andsomeone nearby is trying to steal your credentials.A Couple More Facebook HacksFor those with a bit more technical skill, check out theSame Origin Policy Facebook hackand the somewhat easier,Facebook Password Extractor. We will continue add more Facebook hacks in the near future, so keep coming back here.How to Protect YourselfOn Facebook, go to yourAccount Settingsand check underSecurity. Make sure Secure Browsing is enabled. Firesheep can't sniff out cookies over encrypted connections like HTTPS, so try to steer away from HTTP.Full time SSL. Use Firefox add-ons such asHTTPS-EverywhereorForce-TLS.Log off a website when you're done. Firesheep can't stay logged in to your account if you log off.Use only trustworthy Wi-Fi networks. A hacker can be sitting across from you at Starbucks and looking through your email without you knowing it.Use a VPN. These protect against any sidejacking from the same WiFi network, no matter what website you're on as all your network traffic will be encrypted all the way to your VPN provider.Protecting Yourself: Less Is MoreSocial networking websites are great ways to stay connected with old friends and meet new people. Creating an event, sending a birthday greeting and telling your parents you love them are all a couple of clicks away.Facebook isn't something you need to steer away from, but you do need to be aware of your surroundings and make smart decisions about what you put up on your profile. The less information you give out on Facebook for everyone to see, the more difficult you make it for hackers.If your Facebook account ever gets hacked, check out our guide ongetting your hacked Facebook account backfor information on restoring your account.Bonus: If you're interested in who's checking you out, there are some ways you can (kindof)track who's viewed your Facebook profile.More Password-Hacking GuidesFor more info on cracking passwords, check out our guides onhacking Linux passwords,hacking Windows passwords, and our super-easy beginner's guide onhacking Wi-Fi passwords(or for newer wireless routers,how to crack WPA2-PSK wifi passwords).Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedNews:8 Tips for Creating Strong, Unbreakable PasswordsHack Like a Pro:How to Crack Passwords, Part 1 (Principles & Technologies)How To:Recover Passwords for Windows PCs Using OphcrackHow To:Crack Password-Protected Microsoft Office Files, Including Word Docs & Excel SpreadsheetsHow To:If You Use Password Hints in Windows 7 or 8, This Hack Could Easily Exploit ThemVideo:How to Crack Weak Wi-Fi Passwords in Seconds with Airgeddon on Parrot OSHow To:Hack WPA WiFi Passwords by Cracking the WPS PINHow To:Protect Yourself from macOS High Sierra's Glaring Empty-Password Security FlawAdvice from a Real Hacker:How to Create Stronger PasswordsHow To:Hack 200 Online User Accounts in Less Than 2 Hours (From Sites Like Twitter, Reddit & Microsoft)Hack Like a Pro:How to Hack Facebook (Facebook Password Extractor)Hack Like a Pro:How to Crack Passwords, Part 2 (Cracking Strategy)How To:Creating Unique and Safe Passwords, Part 1 Using WordlistsHack Like a Pro:How to Crack Passwords, Part 5 (Creating a Custom Wordlist with CeWL)How To:Really Protect Your Encrypted iPhone Backups in iOS 11 from Thieves & HackersHow To:Use Acccheck to Extract Windows Passwords Over NetworksHow To:The Beginner's Guide to Defending Against Wi-Fi HackingHow To:How Hackers Take Your Encrypted Passwords & Crack ThemNews:Should district be allowed to demand middle-schooler's Facebook password?News:Advanced Cracking Techniques, Part 1: Custom DictionariesMastering Security, Part 1:How to Manage and Create Strong PasswordsHow To:GPU Accelerate Cracking Passwords with HashcatRainbow Tables:How to Create & Use Them to Crack PasswordsNews:Advanced Cracking Techniques, Part 2: Intelligent BruteforcingNews:Flaw in Facebook & Google Allows Phishing, Spam & MoreSecure Your Computer, Part 2:Password-Protect the GRUB Bootloader on Dual-Booted PCsHow To:Recover WinRAR and Zip PasswordsSecure Your Computer, Part 1:Password-Protect your BIOS Boot ScreenHow To:Bypass Windows and Linux PasswordsDon't Get Doxed:5 Steps to Protecting Your Private Information on the WebSocial Engineering, Part 2:Hacking a Friend's Facebook PasswordHow To:13 Delicious Ways to Reuse Your Thanksgiving LeftoversHow To:Really Connect Your Words with Friends Mobile Account to FacebookHow To:How Hackers Steal Your Internet & How to Defend Against ItHow To:Recover a Windows Password with OphcrackHow To:Hack Mac OS X Lion PasswordsHow To:Unlock Your Car with a ShoelaceNews:Should Kids Be Allowed to Use Facebook and Google+?