Tumblr has released an update for its iOS app to fix a major security bug that the company says allowed passwords of iPhone and iPad users to be compromised in certain circumstances.

From Tumblr’s blog:

We have just released a very important security update for our iPhone and iPad apps addressing an issue that allowed passwords to be compromised in certain circumstances¹. Please download the update now.

If you’ve been using these apps, you should also update your password on Tumblr and anywhere else you may have been using the same password. It’s also good practice to use different passwords across different services by using an app like 1Password or LastPass.

Please know that we take your security very seriously and are tremendously sorry for this lapse and inconvenience.

¹ “Sniffed” in transit on certain versions of the app

Tumblr strongly recommends users using the iPhone and iPad app to download the update immediately.

So don’t waste any time and download the update via the Updates tab in the App Store app or use this direct iTunes link.

HT – The Next Web