{"id":126392,"date":"2022-12-03T15:23:35","date_gmt":"2022-12-03T20:23:35","guid":{"rendered":"https:\/\/rbach.net\/?p=126392"},"modified":"2023-01-13T15:02:19","modified_gmt":"2023-01-13T20:02:19","slug":"bad-passwords-2022","status":"publish","type":"post","link":"https:\/\/rbach.net\/index.php\/bad-passwords-2022\/","title":{"rendered":"Bad Passwords 2022"},"content":{"rendered":"\r\n

\"Bad<\/a>Password manager proprietor NordPass<\/a> has released it’s third annual list of most common passwords<\/strong><\/a>. The firm worked with security experts to cull the top compromised passwords for 2022 from 3TB of stolen password data found on the dark web. What they found is like d\u00e9j\u00e0 vu, all over again.\u00a0<\/p>\r\n

\"NordPass\"<\/a>2022’s most commonly found password “password”<\/strong> has been in the top 5 since 2019. “Password” was found nearly 5 million times in the NordPass list from the dark web. Eight variants of “password” are included in the list.<\/p>\r\n\n\n\n\n\t\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Rank<\/th>Password<\/th>Count<\/th>\n<\/tr>\n<\/thead>\n
1<\/td>password<\/td>4,929,113<\/td>\n<\/tr>\n
34<\/td>pass@123<\/td>3,9046<\/td>\n<\/tr>\n
56<\/td>password1<\/td>25,113<\/td>\n<\/tr>\n
139<\/td>Password<\/td>12,029<\/td>\n<\/tr>\n
173<\/td>password123<\/td>9,889<\/td>\n<\/tr>\n
188<\/td>Pass@123<\/td>9,359<\/td>\n<\/tr>\n
189<\/td>passw0rd<\/td>9,349<\/td>\n<\/tr>\n
192<\/td>Password1<\/td>9,220<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\r\n

The second most popular password “123456<\/strong>” had held the number 1 spot in 2020 and 2021.<\/p>\r\n

C-level passwords<\/h3>\r\n

NordPass also looked at<\/a> leaked C-level passwords. The big bosses are not better than their staff. C-level staff use the same top ten bad passwords.<\/p>\r\n

    \r\n
  1. 123456<\/li>\r\n
  2. password<\/li>\r\n
  3. 12345<\/li>\r\n
  4. 123456789<\/li>\r\n
  5. qwerty<\/li>\r\n
  6. 1234<\/li>\r\n
  7. qwerty123<\/li>\r\n
  8. 1q2w3e<\/li>\r\n
  9. 111111<\/li>\r\n
  10. 12345678<\/li>\r\n<\/ol>\r\n

    Other password facts<\/h3>\r\n

    For the first time the Nordpass results were broken out by gender. Both men and women favored the same top bad passwords<\/strong>.<\/p>\r\n

    \"Password\"<\/a><\/p>\r\n

    Movies<\/strong> on the list:<\/p>\r\n

    #125 “superman” was used 12,100 times.<\/p>\r\n

    #171 “matrix” was used 10,122\u00a0 times.<\/p>\r\n

    #185 “batman” was used 9,407 times.<\/p>\r\n

    #196 “starwars”\u00a0 was used 9,091 times.<\/p>\r\n

    Hockey teams<\/strong> are popular for bad passwords. “Detroit Red Wings” and “Columbus Blue Jackets” were among the most popular sports themed bad passwords.<\/p>\r\n

    On the music<\/strong> front, “U2”, “Prince” and “Metallica” were popular hacked passwords.<\/p>\r\n

    Small cars<\/strong> are popular for lazy passwords. “mini”, “kia”, and “vw” were frequently used.<\/p>\r\n

    2022’s worst passwords<\/h3>\r\n\n\n\n\n\t\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
    Rank<\/th>Password<\/th>Change
    \nfrom 2021<\/th>\n<\/tr>\n<\/thead>\n
    1<\/td>password<\/td>+4<\/td>\n<\/tr>\n
    2<\/td>123456<\/td>+1<\/td>\n<\/tr>\n
    3<\/td>123456789<\/td>-1<\/td>\n<\/tr>\n
    4<\/td>guest<\/td>New<\/td>\n<\/tr>\n
    5<\/td>qwerty<\/td>-1<\/td>\n<\/tr>\n
    6<\/td>12345678<\/td>0<\/td>\n<\/tr>\n
    7<\/td>111111<\/td>0<\/td>\n<\/tr>\n
    8<\/td>12345<\/td>-5<\/td>\n<\/tr>\n
    9<\/td>col123456<\/td>New<\/td>\n<\/tr>\n
    10<\/td>123123<\/td>-2<\/td>\n<\/tr>\n
    11<\/td>1234567<\/td>-1<\/td>\n<\/tr>\n
    12<\/td>1234<\/td>+5<\/td>\n<\/tr>\n
    13<\/td>1234567890<\/td>-4<\/td>\n<\/tr>\n
    14<\/td>000000<\/td>-2<\/td>\n<\/tr>\n
    15<\/td>555555<\/td>New<\/td>\n<\/tr>\n
    16<\/td>666666<\/td>+8<\/td>\n<\/tr>\n
    17<\/td>123321<\/td>+2<\/td>\n<\/tr>\n
    18<\/td>654321<\/td>+5<\/td>\n<\/tr>\n
    19<\/td>7777777<\/td>New<\/td>\n<\/tr>\n
    20<\/td>123<\/td>New<\/td>\n<\/tr>\n
    21<\/td>d1lakiss<\/td>New<\/td>\n<\/tr>\n
    22<\/td>77777<\/td>New<\/td>\n<\/tr>\n
    23<\/td>110110jp<\/td>New<\/td>\n<\/tr>\n
    24<\/td>1111<\/td>New<\/td>\n<\/tr>\n
    25<\/td>987654321<\/td>0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\r\n

    rb-<\/em><\/strong><\/p>\r\n

    It is worth pointing out again, and again again. <\/em><\/p>\r\n

      \r\n
    1. \"how<\/a>Make sure none of your passwords are on this (or any other list). If they are log on and change<\/strong> them immediately.
      <\/em><\/li>\r\n
    2. Use two-factor authentication<\/strong><\/a>, whenever possible. Even if a hacker has your password, they won\u2019t have that random code and therefore won\u2019t be able to get into your account.<\/em> Not sure if your favorite website supports two-factor authentication, search the Two Factor Auth List<\/a> to find out.<\/em><\/li>\r\n
    3. Consider a password manager<\/a><\/strong>. Your brain is no longer an adequate password manager.<\/em><\/li>\r\n<\/ol>\r\n

      How you can help Ukraine!<\/a><\/strong><\/em><\/p>\r\n

      Related article<\/strong><\/p>\r\n