65
Top 200 Most Common Passwords | NordPass (nordpass.com)
submitted 11 months ago by to c/technology@beehaw.org
33 comments fedilink hide all child comments
 

Seven years since our first top 200 common passwords list, we’ve witnessed how credential trends have changed — and what has remained the same. Each year, we rediscover people’s tendency to opt for weak passwords that prioritize convenience over security.

However, this year, we decided to ask ourselves: How do different generations treat their password use? From the silent generation to the “zoomers,” we analyzed which passwords are the most common among different user groups. As it turns out, bad password habits are trendy no matter how old you are.

you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 11 months ago (4 children)

Looking at the different countries is also funny. The only password I'm not surprised about is admin, because that's probably the default for most devices maybe? Unless user changes it manually.

But my question is, are these only "hacked" passwords? Because those who are not hacked, you don't know what passwords they have. So this is a bit of bias here, right?

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 7 points 11 months ago (2 children)

    But my question is, are these only “hacked” passwords? Because those who are not hacked, you don’t know what passwords they have. So this is a bit of bias here, right?

    No, that's not how these are obtained. Password dumps are from attackers breaching a site's user database and dumping their credentials, usually by phishing administrators' logins. Attackers are brute-forcing passwords anymore except on a one-off, very rare basis. Here's a list of publicly-known password dumps, and you can see details about where they came from: https://haveibeenpwned.com/PwnedWebsites

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 11 months ago (1 child)

    Ah right, that makes sense. I know that site, but didn't think of. I know not the smartes in the town.^^

    I also wonder if people do more secure passwords for important services. Or do they treat it the same? My parents always used their birthday as password, so they do not forget it. Which not much more secure than 1234.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 11 months ago

    I also wonder if people do more secure passwords for important services.

    In my experience, most people have at most 2-3 passwords, and some do choose a "more secure" one for things like banking and work. Very few people use a password manager.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 5 points 11 months ago

    Thankfully this isn't allowed for new devices being sold in the EU anymore. They are required to have a per-device individual password now. Hopefully this effectively causes the practice to at least become much less common globally. After all, if you've setup the needed manufacturing steps, there's little sense in skipping them depending on a target region.

  • permalink
  • fedilink
  • source
  • parent