Millions of people still use 123456 as their password

[Slurs Gang]

Source: https://www.techspot.com/news/79747-millions-people-use-123456-their-password.html

Quote

The report by the UK's National Cyber Security Centre (NCSC) analyzed passwords found in public databases of breached accounts to find out popular words, phrases, and strings. It appears that the worst password of 2018—123456—remains the most popular, appearing in more than 23 million passwords.

Quote

The second-most popular string was the equally bad 123456789, while the other top five entries include "qwerty," "password," and 1111111.

People’s names are still commonly used as passwords, the most popular being Ashley, followed by Michael, Daniel, Jessica and Charlie. And when it comes to using band names, Blink182 is the most common, followed by 50cent. Superman, meanwhile, is the most popular fictional character name used as a password.

 

No wonder why there are so many accounts got breached with weak passwords. I think these people feel confident that their accounts are secure with these bad passwords. Yeah, it is easy to remember 123456 than some long ass password mix with bunch of letters, numbers, and symbols but the trade off having an easy remember password is account can easily get breach. Yet, people are still using these bad passwords in 2019. These type of people should quit internet for real though. God bless these people online bank accounts if they are using these bad passwords.

[bcredeur97]

people get easily overwhelmed with passwords and end up setting them to be stupid things like this.

There is solutions (password managers so you only have to remember one thing) but people sadly ignore them or consider them to be too much trouble to use (Also think -- what if I have to login on a device I don't own?)

It really seems like bad passwords will forever be a problem.

[NumLock21]

Only newbs uses 123456 as their password.

 Elites on the other hand uses "password" as their password.

 

Why elites use "password" as password, because it confuses the heck out of everyone.
What is your password?

Password
What is your passord?

Password
What is your password!
Password
WHAT IS YOUR PASSWORD!!!
Password

 

[tarfeef101]

I would have better passwords if companies didn't try to save 5 cents on storage space by creating stupid password requirements. Specifically length limits. 

Just this morning I got signed out of origin, and had to sign in again. Had to reset it cause it was a 16 character limit and I generally use more than that, so I had no idea what it was.

Yeah EA, I'm sure the couple extra bytes would totally cripple your business. 


Hell I've even seen banks with a tiny limit on length. Like, wtf?! It's a bank password!! If I want it to be secure, let me!

[jiyeon]

These are the same people who cry "Oh my lord, I've been hacked!" and act all shocked at how someone could possibly enter their account when they set themselves up for it in the first place...

[bcredeur97]

and no, p@ssw0rd isn't a good option either

[.Apex.]

7 minutes ago, tarfeef101 said:

Hell I've even seen banks with a tiny limit on length. Like, wtf?! It's a bank password!! If I want it to be secure, let me! 

Yeah.. there's a stupid limit on my bank password as well, I had to get creative, it's really stupid

[Jito463]

This thread is just begging for this.

[The Benjamins]

8 minutes ago, NumLock21 said:

Only newbs uses 123456 as their password.

 Elites on the other hand uses "password" as their password.

 

Why elites use "password" as password, because it confuses the heck out of everyone.
What is your password?

Password
What is your passord?

Password
What is your password!
Password
WHAT IS YOUR PASSWORD!!!
Password

 

I prefer, 

What is your password?

WhatPassword
The password to your account?

WhatPassword
The password to your account password so I can watch movies!!!

WhatPassword

[wANKER]

5 minutes ago, bcredeur97 said:

and no, p@ssw0rd isn't a good option either

IKR

 

No capital letter, fucking nubs 

[TacoSenpai]

Shit someone found out I use naruto as my password now they'll know I watch anime.

[NumLock21]

I just noticed insults and profanity to be the best passwords

What is your password?

Ya stupid prick!

What is your password?

F*ckYou

 

[jiyeon]

11 minutes ago, ReggieGRS said:

For those who have tons of password to manage i can sort of understand a weak password for easier remembrance but 123456 is just asking for trouble tho at least turn on that 2FA.

Weaker passwords coupled with 2FA is the bare minimum to me. One wall isn't enough, 2FA is next-level authentication and almost guarantees that the account owner is aware that their account is being accessed and denies the individual trying to access the account short.

[Crunchy Dragon]

20 minutes ago, bcredeur97 said:

and no, p@ssw0rd isn't a good option either

What about p@$$w0rd

[7Hertz]

I enjoy the laugh over the phone whenever i'm asked to confirm my email.. i sound like a robot doing it too it's ridiculously long and complex and comes out like it was already in memory at the present time lol.

[NeoMontz]

Actually it depends on the account priority.

Like for e.g.

I use simple passwords(not the above dumbness but still guessable) for like local grocery store apps, uber, ola, zomato, quora, etc bcoz there is no harm and can be reset using mobile number.

(I only pay by cash, so i dont link any bank acc or card to them)

And "god lvl "passwords for google amazon 9gag twitter etc.

[BuckGup]

34 minutes ago, bcredeur97 said:

people get easily overwhelmed with passwords and end up setting them to be stupid things like this.

There is solutions (password managers so you only have to remember one thing) but people sadly ignore them or consider them to be too much trouble to use (Also think -- what if I have to login on a device I don't own?)

It really seems like bad passwords will forever be a problem.

Even password managers I wouldn't fully trust though. Honestly the best way is in your brain but if that is too hard then physical 2FA keys or a piece of paper in your wallet

[dfsdfgfkjsefoiqzemnd]

I used to use "I will not give you my password" as a password.  Then I went to the US and CBP wanted to check my laptop ...

 

Joking aside :

 

 

 

[Tristerin]

My work forces a unique password change every 30 days, without the ability to use the previous...30 passwords.  It can be similar with 1 character off but eventually your strong password ends up like this:

 

******************12345678910111213141516 (etc)

 

I personally cant stand how many passwords I have to manage.  A few years ago I started keeping a log book in my wallet (without obvious nomenclatures to suggest what it is or for).  Only way I can do it anymore.

[Guest]

Oh fucks sake Ashley, get it together 

[Shreyas1]

Use 123457, no one will expect you to skip 6!

[TetraSky]

In other news, the sky is blue and grass is green. (usually)

 

I've used bad passwords like that as well, because I couldn't be arsed and I would literally never come back to that website again.

But these days I usually just use Keepass to create unique passwords for everything.

[Bcat00]

I’m not surprised since I use 123456 for unimportant accounts too

 

likely a lot of people are in the same boat as me who just want to create a account for 1 time use stuff that doesn’t involve money and etc

[poochyena]

I use that password a lot too. I want my throwaway accounts to be easy to get back into later and couldn't care less if someone else logs into them.

[tarfeef101]

2 hours ago, James Evens said:

Hashing is also difficult.  Same applies to not write them into logs.

As someone who's degree is in CS, and works in the field, I can say this:

Hashing something of length 15 vs 40 characters with the algorithms we use is not meaningfully different. The same algorithms work, and will still take negligible runtime. 

Also it's just as hard to not write a 2 byte password in a log vs a 10 byte one. That makes no difference at all...