You definitely don't want to be using these

all 46 comments

sorted by: hot top controversial new old
[–] 50 points 1 year ago (4 children)
  • [–] 17 points 1 year ago
    [–] 17 points 1 year ago (3 children)

    according to data from the password security website called NordPass all of which would take a hacker less than a second to crack. Take a look at this quality design to learn about popular passwords that you definitely shouldn’t use such as 123456 which was used 3 million times, 123456789 which was used 1.6 million times, 12345678 which was used 885 thousand times, “password” which was used 692 thousand times and qwerty123 which was used 643 thousand times.

    Is it normal for a password manager to be able to recognize which passwords are being used? Does this reflect badly on NordPass?

  • source
  • hideshow 3 child comments
  • [–] 13 points 1 year ago (1 child)

    The thumbnail shows "assword" so I'll upvote.

  • source
  • hideshow 1 child comment
  • [–] 11 points 1 year ago (2 children)

    What's with dragon and monkey?

  • source
  • hideshow 2 child comments
  • [–] 19 points 1 year ago (6 children)

    Hackers (1995) taught me the four most commonly used passwords are "love", "sex", "'secret", and "god".

    "secret" is there. "iloveyou" has love in it.

    I wonder how true that actually was in the 90s.

  • source
  • hideshow 6 child comments
  • [–] 16 points 1 year ago (2 children)

    Before password composition rules, those were actually quite common, as well as passwords that were just the same as the username. Heck, it wasn't until that long ago that router manufacturers used to ship with admin/admin as the default credentials.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 1 year ago

    Honestly every networking company that couldn't be bothered to ship with randomized creds physically embedded/etched somewhere on the device should've probably went out of business. The cost has always been minimal and the increased security value has always been readily apparent.

  • source
  • parent
  • [–] 9 points 1 year ago (2 children)

    1Frog_isDancingOnMyPizzaNow!

  • source
  • hideshow 2 child comments
  • [–] 8 points 1 year ago (9 children)

    So i guess p@s5w0RD123pA55wOrD would be super strong.

  • source
  • hideshow 9 child comments
  • [–] 7 points 1 year ago (4 children)

    From my experience brute forcing passwords, no. It’s smart enough to try character substitutions and it annoys me so much that the FBI recommends this practice.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 1 year ago (3 children)

    Wait it's not? I remember some people in the industry recommend this sort of password albeit with variation of other random words as it's pretty strong and would take a very long time to crack.

  • source
  • parent
  • hideshow 3 child comments
  • [–] -1 points 1 year ago (1 child)

    If it’s a bunch of words found in any dictionary then with or without character substitution it’ll be easy to crack.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago

    It's not. A dictionary has on the order of ≈100,000 (10^5) words in it. Picking five words entirely at random gives you 10^25 combinations, which is about the complexity of 14 alphanumeric characters. So pretty secure.

  • source
  • parent
  • [–] 3 points 1 year ago (1 child)

    That's okay at best. Better if a passphrase, just random, impersonal words, something like this (~50 bits of entropy):

    "virtual raging vineyard clad runner"

    Best is a long, completely random string, stored in the password manager that you should be using anyways ~150 bits of entropy):

    "hX0hZ1QTWtQo(h[Ta9jH]TmsVIhUTgSE"

  • source
  • parent
  • hideshow 1 child comment
  • [–] 8 points 1 year ago

    I see password and password1

    Mfw I’m sittin’ safe all the way down here at password69 😎

  • source
  • [–] 7 points 1 year ago

    Not using reindeerflotilla, smh

  • source
  • [–] 7 points 1 year ago

    Monkey 🐵

  • source
  • [–] 6 points 1 year ago*

    I am really surprised some common shit is not there, like hello, hello1234, abcd1234 (and other perms have numbers in front, etc)

  • source
  • [–] 6 points 1 year ago

    trustevery1

  • source
  • [–] 6 points 1 year ago (1 child)

    Strange how much higher the top one, 123456, is than the others, and how the most popular ones with repeating numbers also have 6 digits. Why do people like 6 digits so much more than 5 or 7?

  • source
  • hideshow 1 child comment
  • [–] 8 points 1 year ago

    Because of composition rules. Fewer characters, much easier to brute force guess.

    So when a site tells you 'Your password must be at least 6 characters long', and they just want to get past it to get to the content, the number is already on their mind.

  • source
  • parent
  • [–] 6 points 1 year ago

    Everybody else uses a first name or birthday combo

  • source
  • P@ssw0rd no one will ever guess this one!

  • source
  • [–] 3 points 1 year ago

    Pick password Unga. Monkey.

  • source
  • [–] 3 points 1 year ago

    Really surprised my old one isn't on there. Dontknow.

  • source