I think the previous commenter must have meant "had" as that says as of sometime before the 2012 date on that article the master password allegedly no longer worked.

Still egregious if that sort of early stage stuff hung around that long, but not the same as it being there today.

That password only worked from Facebook's corporate IP addresses.