NordPass has published their 2023 edition of the top 200 most common passwords and unsurprisingly very few of the entries are secure. The top 10 can all...

The worst passwords of 2023 are also the most common, “123456” comes in first::undefined

  • brygphilomena@lemmy.worldEnglish
    52·
    2 years ago

    only one – “theworldinyourhand” – is virtually uncrackable. It is the number 173 most common password and would take centuries to guess using brute force.

    Not anymore. That would get moved towards the top of the rainbow table now.

  • Square Singer@feddit.deEnglish
    24·
    2 years ago

    They got this data from password leaks. Crappy sites that force you to create an unnecessary account for basic usage are arguebly more often part of password leaks.

    So it’s not a surprise that a huge amount of leaked accounts have passwords like 123456, because that’s exactly the right kind of password for a throwaway account that you’ll never need again. In the best case coupled to a trashmail email account.

  • edgemaster72@lemmy.worldEnglish
    16·
    2 years ago

    No mention of descending numbers, looks like 654321 is still safe. Not that uh, I, would have any particular worry about that one, nope.

    eyes dart back and forth rapidly

    • nul@programming.devEnglish
      6·
      2 years ago

      Just waiting for the day when they start calling out those of us who make all our passwords easy to type with one hand.

      • taiyang@lemmy.worldEnglish
        2·
        2 years ago

        Funny, I thought only I did that. Looks like a boss when you login to a system with just one hand and at lightning fast speeds.

  • MeekerThanBeaker@lemmy.worldEnglish
    8·
    2 years ago

    I think most of these are for accounts where people don’t care if they are hacked or not.

    Regardless, this should not be on the individual. The issue is with the website that allows those types of passwords to begin with. There are sites that don’t allow special characters at all. Stupid.

    • JustAnotherRando@lemmy.worldEnglish
      9·
      2 years ago

      The most infuriating thing is websites that actually limit secure passwords (e.g. “password must be between 6 and 12 characters”). Preventing longer passwords makes little sense if they’re salting and hashing; and if they’re storing the passwords in plain text (which is just about the only reason to limit the max length to anything less than what a person would reasonably remember), that’s even worse.

    • systemglitch@lemmy.worldEnglish
      4·
      2 years ago

      Exactly, I’m not using a real password for a site I don’t care about where I have nothing to protect.

      I’m using something simple that I can type with one hand.

      Something important however? Good luck figuring that out.