In light of the recent security concerns arising around Twitter and the need for third-party apps to use your Twitter credentials to interact with your account, we thought it might be a good time to discuss our stance on the issue and hopefully clear up any concerns you may have in using Tweetree as your Twitter client.
Why we need your Twitter password
Tweetree uses the Twitter API, a programming interface for communicating with the Twitter service. Twitter makes this API available to third-party developers like Tweetree. For many Twitter API uses (such as retrieving tweets in your Twitter stream), the Twitter API requires that you supply your username and password. This is a requirement of the Twitter API, and there is no alternative at the moment.
Only some features require you to login
You only need to login if you want to view your own personal stream or post to Twitter. You can view anybody’s public stream and use the search feature without logging in, similar to the Twitter.com pages.
Your account details are stored securely, and only for the duration of your visit
While you’re using Tweetree, we hold on to your login and password so you don’t need to keep supplying it whenever we communicate with the Twitter API. Since Tweetree does a number of Twitter API requests in quick succession (such as retrieving the context of tweets), it would be impractical to keep asking for your password (and ultimately no more secure). Your username and password is stored in a temporary database that is removed whenever you close your browser (or delete your cookie).
We will never sell or otherwise share your information with anyone
Our Privacy Policy goes into further details on this, but the bottom line is that we are in this for the long run, your trust is important to us, and we won’t sell/rent/divulge your password or other confidential information.
We are an established company with a reputation to uphold
Draconis Software, LLC has been in business for over three years providing web development and consulting services to many clients. We have a physical mailing address and a telephone number. We’re also not a faceless company: the three people who worked on Tweetree for Draconis is @cwalcott, @rtwomey, and @jfredson.
We will use a more secure method of authentication as soon as Twitter makes it available
We are as anxious as anyone for Twitter to implement a more secure method of authentication (such as OAuth) that doesn’t require you to give out your account password to third-party apps. Will will implement this as soon as Twitter makes it available, which will no longer require you to supply your password.
Change your password frequently
As long as Twitter is requiring third-party apps to use your account credentials, you should get in the habit of changing your password often, especially if you are trying out new third-party apps that don’t have a reliable track-record that you can trust.
If you have any questions or concerns, don’t hesitate to send us a message @tweetree or info@tweetree.com.
Recent Comments