Okta has recently fixed a notably unusual bug in its software.

The digital security management firm released a bug fix report on [its website](https://trust.okta.com/security-advisories/okta-ad-ldap-delegated-authentication-username/) (first highlighted by [The Verge](https://www.theverge.com/2024/11/1/24285874/okta-52-character-login-password-authentication-bypass)), notifying users about a flaw that might have allowed unauthorized access to accounts. While software glitches are typical, this one had a distinctive aspect: it could have permitted an individual to log into an account *without needing a password*—provided the username was at least 52 characters long.

**SEE ALSO:** [Largest U.S. healthcare data breach exposes medical records of 100 million customers](https://mashable.com/article/largest-us-healthcre-breach-100-million-medical-records-exposed)

“Under certain circumstances, this could enable users to authenticate by only supplying the username along with the cached key from a previous successful authentication,” Okta clarified in its report.

It is crucial to emphasize that this issue has now been fully resolved, and Okta users can rest assured that this vulnerability no longer exists. However, the bug had been active for about three months—since July—until its discovery on October 30. While this is a considerable duration for such a issue to be present, it remains uncertain whether any accounts were compromised as a consequence.