Facebook has been prompting some users registering for the first time to hand over the passwords to their email accounts. Nobody should ever ask for your email password.
Let me repeat that: “Nobody should ever ask for your email password.”
A Twitter account using the handle @originalesushi first posted an image of the screen several days ago, in which new users are told they can confirm their third-party email addresses “automatically” by giving Facebook their login credentials. The Beast wrote that the prompt appeared to trigger under circumstances where Facebook might think a sign-up attempt is “suspicious,” and confirmed it on their end by “using a disposable webmail address and connecting through a VPN in Romania.”
You can read more in an article by Kevin Poulsen in TheDailyBeast web site at: http://bit.ly/2VfWnrh.