3 ms·
I'm sure nobody is surprised that the most common passwords are "123456", "password", etc. There is a perception in communities like ours that the average user
by donall 15y ago
I'm sure nobody is surprised that the most common passwords are "123456", "password", etc. There is a perception in communities like ours that the average user is completely inept and shouldn't be trusted to create a secure password, but I have to wonder how many of these passwords are actually designed to be secure.
I often use enormously unsecure passwords when "signing up" for sites that require registration to continue. I've probably created dozens of accounts around the web with logins like 'qwerty:qwerty' or 'qwer4321:qwerfdsa'. This isn't because I'm a moron, it's because I will never need to access the account again and I therefore don't care about security. "qwerty" is easier to type into a password field twice (for confirmation) than "glxCdsXX3_2".
I would be interested in seeing an analysis of the actual usage of accounts with the most common passwords. It would be interesting to have a bot log into a large amount of cracked accounts and download any usage history or generated data that would indicate how often the account has been used. My guess is that a significant number of the common-password accounts would have the same date for "first created" and "last login". That data could be used to weight the frequencies of the common passwords and paint a much more interesting picture.