Why do you ask for my facebook password?

[otrejni]

Hello, I'm really thrilled about Spotify asking for my facebook password in order to log in with facebook. Why don't you have a normal "Login with facebook" button that uses credentials authorized on facebook without having to reveal you what my password is, and not even how securely it is traveling thru internet?

[Peter__]

Spotify login via Facebook does autheticate directly with Facebook, Spotify do not store those details.

[otrejni]

Oh, yeah? Why doesn't it use a facebook official button then? What's the point on asking my password?

[pnc]

Facebook official button is only helpful when you already logged in with the same browser. If you didnt, you will have to enter your password. Imagine Spotify client is a new browser and you need to login before granting Facebook to link with Spotify.

[chrisalexthomas]

I'm sorry, but as a developer this answer is not acceptable.

It's bad security practices to ask for the password of peoples facebook account when already facebook provides an API for accessing my account without requiring my password.

Perhaps you should hire better trained developers who are more capable of doing the job properly, instead of implementing quick hacks like this which train people who are less experienced than myself and perhaps others that when asked for their facebook account details, they give it without a second thought.

People wonder why so many facebook accounts get hacked and it's policies like this which are directly responsible for that problem.

This is highly irresponsible behaviour on the part of spotify and it should be fixed IMMEDIATELY!

[chrisalexthomas]

this might be late, but it's useful for other people to follow.

Facebook, allows you to create "Application specific passwords" which are ways to let other apps use your facebook account, logging into it, without knowing your main password.

basically, you can ask it, create a password and call it spotify, then use that password with your facebook email address and I've just successfully logged into spotify using my facebook account, without giving my "master password"

the master password, would be the password you LITERALLY use to login to facebook, the one you type into facebook.com

But this password, it's completely random, facebook just let apps which require facebook login to use it, without giving away anything important.

Go here: https://www.facebook.com/settings?tab=security&view

Then, look in the page for "App Passwords" and click edit and follow the instructions, I called mine spotify, grabbed the password and used it and it worked first time.

so I think this is the safest way to solve this problem.

I found the original solution here: http://webapps.stackexchange.com/a/42253/69381

[danglingbaby]

Thanks for this info chrisalexthomas. I'm a new user and I find it positively INSANE that I'm being prompted for my Facebook password when trying to use the windows application. Every other application I have ever seen, as you mentioned, simply has a "connect with Facebook" button. I am not giving Spotify my Facebook password, as it's impossible to know how many people behind the scenes might be able to access that information.

[SpudWumper · Accepted solution]

Spotify needs to find a better way - the facebook login is easy to spoof:

https://www.facebook.com/Hgtricks/posts/395419507233274

Try this - settings / security login / two factor / app specific password