Instagram User in Danger: The platform can track user's web activity including passwords

Instagram, a Meta-owned photo-sharing platform is capable of tracking its users' actions, text choices and even text input, like passwords and other confidential credit card information, if they visit a link inside the app, states the new report. Most apps use Apple's Safari for loading websites, but Instagram and Facebook have been using their own in-app browser to load websites within the app, reports MacRumors. With their custom-built browser, still based on WebKit, Instagram and Facebook inject a tracking JavaScript code-named "Meta Pixel" into all links and websites shown. The Instagram app injects its tracking code into every website shown, including when clicking on ads, enabling them to monitor all user interactions, like every button and link tapped, text selections, screenshots, as well as any form inputs, like passwords, addresses, and credit card numbers. As Krause pointed out, it takes reasonable effort for companies like Meta to develop and maintain their own in-app browser rather than use Apple's built-in Safari.