How Meta is improving password security and preserving privacy
Aug 8, 2023Hao Chen, Zhiyi Zhang, Haozhi Xiong, Ananth Raghunathan
Summary
Introduced Private Data Lookup (PDL), a privacy-enhancing technology based on Private Set Intersection, to enable privacy-preserving password prechecks and breached password checks in Enterprise Center. PDL allows users to privately query server-side data sets without revealing their data to Meta. Implemented optimizations for PDL including pre-processing of compromised password data, sharding the leaked password dataset, and compression of blinded hash values to improve performance and reduce latency and bandwidth usage.
More from the Application Security and Permissions trail
- How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees
- Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study
- Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable
- How Meta Is Strengthening End-to-End Encrypted Backups
- Post-Quantum Cryptography Migration at Meta: Framework, Lessons, and Takeaways