Why You Shouldn’t Use Facebook to Log In to Other Sites -- NYT

Also see Facebook finds ‘no evidence’ hackers accessed connected apps (TechCrunch)

"The best way is to use a dedicated password manager — a service, like LastPass or 1Password, that creates and remembers strong passwords for different sites. Operating systems and browsers are also getting better at managing passwords; newer iPhones, for instance, let you unlock sites with facial recognition, which is just as convenient as pressing Facebook’s button.

If for some reason you don’t want to use a password manager, you can use another tech giant’s sign-on service. When presented with different ways to sign on to sites, you can choose Google or Microsoft instead of Facebook.

Yes, it’s possible those companies could be hacked one day, too. After all, Yahoo was hacked, as was LinkedIn, as was Equifax. But at this moment, a sign-on service by Google or Microsoft has one big advantage over Facebook’s: Those companies did not lose control of 50 million people’s accounts, and Facebook did."

Why You Shouldn’t Use Facebook to Log In to Other Sites (NYT)