Hackers may have known all your passwords, if you are using an app called 1password.

The convenient password management app has become a victim of a software bug that may leak all its passwords in unencrypted plain text.

The bug was found in a content delivery network (CDN) called Cloudflare last Friday by a Google security monitoring branch, and became publicly known on Thursday.

Cloudflare posted a report on the company's blog on Thursday admitting the existence of the bug, but stressed that customer SSL private keys, which are even more critical to web security, were not leaked.

The CDN company has taken measures to resolve the issue. Currently it's "no longer possible" to exploit this bug.

A Chinese tech-specified translator, nicknamed "Erlang", said on Weibo that this incident has the potential to be one of the largest Internet security disasters of all time.

The globally famous car-hailing company Uber, and smart wristband maker FitBit are other victims of this incident. User's personal information related to these apps may have been leaked as well.