![](https://steemitimages.com/DQmXbrRKC3T4Y3JFduwSHec2hDZf6LMVgPBeio3ywuDj8q1/image.png)

> We have reason to believe that Bitly account credentials have been compromised; specifically, users’ email addresses, encrypted passwords, API keys and OAuth tokens. We have no indication at this time that any accounts have been accessed without permission. We have taken steps to ensure the security of all accounts, including disconnecting all users’ Facebook and Twitter accounts. All users can safely reconnect these accounts at their next login.

UPDATE #4 – MAY 11 at 11:33AM EDT: We are sending an email to all users from the domain bitlysupport.com outlining the steps to secure your account.  If you have already followed the steps to secure your account, you do not need to do so again.

UPDATE #3 – MAY 9 at 2:45PM EDT: We have updated this post to address questions regarding the Bitly iPhone app.

UPDATE #2 – MAY 9 at 10:30AM EDT:  We have updated this post to explain what specifically was compromised and we’re encouraging all of our users to secure their Bitly accounts by following the recommendations listed below.

UPDATE #1 – MAY 8 at 8:32PM EDT: We have updated the section of this post regarding users who have Twitter or Facebook accounts connected to their Bitly accounts.

If you are not using a password manager and using unique alphanumeric, with symbols, uppercase, and 20+ character passwords, you should change that right away!  This is nearly a daily thing now and will not be getting any better.

No one cares about your privacy or identity but you.  Even this won't prevent what companies do with your information but it will dramatically reduce your exposure.  If a site doesn't need your true identity for taxes/billing purposes, use a [fake name](http://www.fakenamegenerator.com).

When you hear about a breach, immediately change your password.  It may not help if they have access to the underlying systems but in most cases. it will.

If you are not using [haveibeenpwned](https://haveibeenpwned.com), you should sign up immediately.  They will notify you when a new breach is discovered and your email address in the breach.   Most of the time there is nothing you can do but change your password and anonymize some data on their platform.