Millions of people still use 123456 as their password

[Bouzoo]

2 hours ago, NumLock21 said:

Only newbs uses 123456 as their password.

 Elites on the other hand uses "password" as their password.

 

Why elites use "password" as password, because it confuses the heck out of everyone.
What is your password?

Password
What is your passord?

Password
What is your password!
Password
WHAT IS YOUR PASSWORD!!!
Password

 

 

2 hours ago, The Benjamins said:

I prefer, 

What is your password?

WhatPassword
The password to your account?

WhatPassword
The password to your account password so I can watch movies!!!

WhatPassword

 

No no no. You either go 2444666668888888, so it's 12345678, or fourwordsalluppercase, one word, all lowercase. Easy. 

[Real_PhillBert]

3 hours ago, bcredeur97 said:

and no, p@ssw0rd isn't a good option either

For many years my grandmother used "Incorrect" as her password, because when she couldn't remember what the password was and put in the wrong password in a message would come up and say "your password is incorrect."  

[mr moose]

The problem here is we need human brains to be better at remembering secrets than computers.  Not going to happen.

[DrDerp]

Well, I'll say this. My password has always been 11037, as these numbers saved my life at a time. 

 

Spoiler

Swear to God whoever gets this reference is a champion.

 

[Fnige]

Far out guys, why did you have to show my password

^{Then people try to figure out my password}

[Kenji the Uke]

This thread brought to you by #LastPass !

[Paparachipupopep]

I use terrible passwords all the time and hate when 2fa is forced. Situationally, of course. I'd love for most of the free services I use to have a checkbox acknowledging I don't care about this account's security, and to disable all security measures.

[JB780]

To be fair, Batman is a pretty sweet password.

[tarfeef101]

2 hours ago, James Evens said:

Do you want examples of passwords in clear text? Companies making millions per year do that and as a brief reminder facebook added passwords to there log files.

Again... the length is irrelevant to this point...

Having a longer password doesn't change if it can appear in logs or not... Not sure how you got that idea. 

[MrFixitBlankFace]

imakemypasswordsverylongsonoonecanunlockmyaccountandoneisthe88r@thehouse

 

 

 

[Derangel]

7 hours ago, BuckGup said:

Even password managers I wouldn't fully trust though. Honestly the best way is in your brain but if that is too hard then physical 2FA keys or a piece of paper in your wallet

A good password manager is far better then your brain. Our minds cannot remember multiple truly unique strings of random numbers and letters. You need to create a password “scheme” in order to memorize more than a small handful and any scheme can be figured out.

[BuckGup]

16 minutes ago, Derangel said:

A good password manager is far better then your brain. Our minds cannot remember multiple truly unique strings of random numbers and letters. You need to create a password “scheme” in order to memorize more than a small handful and any scheme can be figured out.

Your brain isn't stored on a server with some security hole though

[ZacoAttaco]

I think to be truly secure these days, you need to take use of a password manager, the key to beating brute force password attacks is password length because each increase in length is a lot more taxing and takes a lot more time for a machine to break.

 

I can't say this story is truly shocking to be honest, most people are very uneducated on the dangers of weak passwords, for all we know people's PayPal accounts could use some of these weak passwords. They won't see the dangers of having a weak password until it's too late.

[NumLock21]

9 hours ago, seoz said:

Weaker passwords coupled with 2FA is the bare minimum to me. One wall isn't enough, 2FA is next-level authentication and almost guarantees that the account owner is aware that their account is being accessed and denies the individual trying to access the account short.

inb4 2FA account password is 654321

[NumLock21]

dp

[Derangel]

3 hours ago, BuckGup said:

Your brain isn't stored on a server with some security hole though

 

Your password schemes are less secure than most password managers. If your primary concern is having secure passwords they must be random, they must be able to resist brute force hacking and social engineering. Writing down passwords on paper is more secure than using a memorized scheme. Easy to remember is the antithesis of secure.

[Fnige]

2 hours ago, NumLock21 said:

dp

? Elaborate

[Andreas Lilja]

Meh I'm guilty of using relatively dumb passwords for sites that don't really matter, like here. What's going to happen if someone gets into my LTT accout?

[sof006]

I went on a website the other day to play an online game and the password requirements was between 6-23 characters with no special characters. That would get easily guessed in today's modern age.

[jiyeon]

7 hours ago, NumLock21 said:

inb4 2FA account password is 654321

2FA would usually be a one-time code sent to your email or phone number, some form of personal ID that only the owner will have access to. I'm yet to see a social account that allows users to set their own 2FA account password.

[BuckGup]

5 hours ago, Derangel said:

 

Your password schemes are less secure than most password managers. If your primary concern is having secure passwords they must be random, they must be able to resist brute force hacking and social engineering. Writing down passwords on paper is more secure than using a memorized scheme. Easy to remember is the antithesis of secure.

I never said anything about easy to remember or patterns. I was just saying in your brain is the safest as it's not connected to the internet yet and isn't written down. Obviously a 26 character password of mixed characters and symbols will be hard to remember 

[Bravo1cc]

This wouldn't be an issue if people didn't click on stupid things, simple passwords are fine for low rick accounts or dummy accounts. Don't personally see an issue with this.

[Ryujin2003]

In case people aren't familiar with this resource:

 

https://www.bennish.net/password-strength-checker/

 

Gives you the estimated strength based on dictionary use and hack time from brute force algorithms.

 

[Jito463]

12 hours ago, sof006 said:

I went on a website the other day to play an online game and the password requirements was between 6-23 characters with no special characters. That would get easily guessed in today's modern age.

I once worked for a place where we were only allowed to create passwords of exactly 8 characters (no more, no less), with no special characters.  And this was just ~5 years ago.

[ZacoAttaco]

7 hours ago, Ryujin2003 said:

In case people aren't familiar with this resource:

 

https://www.bennish.net/password-strength-checker/

 

Thanks for the resource, seems like a neat little site.

If anyone else isn't familiar with password cracking at all here is an excellent video on the subject.