Updated security notice

It seems that there is some confusion about who may be at risk due to the recently communicated leak of information that could be used to guess some user’s password. To clarify, your password is at risk only if all of the following apply:

• You had a Spotify account before December 19th, 2008
• You have not changed your password since December 19th, 2008
• You have a weak password
• Someone from a small group of people asked our servers specifically to see your account details before that date
• Someone from the same small group decided to put computation time towards guessing your password

If your Spotify account was created before December 19th, 2008 you should have received an email about the issue by now, assuming that the email address you stated when registering the account was correct.