'123456' and 'Password' Remain Worst Passwords of the Year for Fifth Consecutive Year

Discussion in 'MacRumors.com News Discussion' started by MacRumors, Dec 14, 2018.

  1. MacRumors macrumors bot

    MacRumors

    Joined:
    Apr 12, 2001
    #1
    [​IMG]


    SplashData published its annual list of the worst passwords of the year this week, sourced from more than five million passwords leaked on the internet this year. Like previous years, 2018 saw numerous high-profile data leaks, but many people have continued to use easily guessable passwords for their online accounts.

    [​IMG]
    The new password autofill feature in iOS 12


    For the fifth consecutive year, "123456" and "password" are the top two most popular passwords online. New entries on the list include "111111", "sunshine", "princess", "666666", "654321", and "donald" at number 23. SplashData CEO Morgan Slain discussed the list: "Hackers have great success using celebrity names, terms from pop culture and sports, and simple keyboard patterns to break into accounts online because they know so many people are using those easy-to-remember combinations."

    The top 10 most popular passwords of 2018:

    1) 123456
    2) password
    3) 123456789
    4) 12345678
    5) 12345
    6) 111111
    7) 1234567
    8) sunshine
    9) qwerty
    10) iloveyou

    Higher up the list, popular passwords include people's names like "daniel", "hannah", and "thomas"; pop culture references like "solo", "tigger", and "lakers"; random items like "cookie" and "banana"; birth years like "1990" and "1991"; and simple phrases like "whatever" and "test". As Slain explained, using super-simple phrases like these for any account online is a bad idea because it's so easy to guess what they are.
    In total, SplashData estimated that almost 10 percent of people have used at least one of the top 25 worst passwords on this year's list, and nearly 3 percent of people have used the worst password at one time, "123456". Most of the five million passwords that were leaked and evaluated for the report came from users in North America and Western Europe.

    To help users stay safe, SplashData said that their passwords should be no shorter than twelve characters and have mixed types of characters in each one. Every log-in should have a different password, and investing in a password management app to store everything, generate random new passwords, and automatically log into websites is always a good idea.

    Apple itself introduced a new password autofill feature in iOS 12 this year, making it easy to connect to third-party password apps and fill out your passwords throughout iOS. If you haven't tried it out yet, check out our guide on using the feature to find out how it works.

    Article Link: '123456' and 'Password' Remain Worst Passwords of the Year for Fifth Consecutive Year
     
  2. bigboyz12000 macrumors member

    bigboyz12000

    Joined:
    Jan 2, 2011
    Location:
    USA
    #2
    The "users" name is also a big one haha! Nothing like cryptic secure passwords.
     
  3. Claymore macrumors newbie

    Joined:
    Jan 18, 2005
    #3
    Quick, change the combination on my luggage! Yes got in there first
     
  4. Kanyay Suspended

    Kanyay

    Joined:
    Dec 14, 2018
    Location:
    Mar-a-Lago, Russia
  5. supremedesigner macrumors 6502a

    supremedesigner

    Joined:
    Dec 9, 2005
    Location:
    Gainesville, Fl
    #5
    I’m surprised JuMamma isn’t listed in there lol
     
  6. cableguy84 macrumors 65816

    cableguy84

    Joined:
    Sep 7, 2015
    Location:
    Essex
    #6
    My macrumors password is a combination of both

    Password123456
     
  7. AngerDanger macrumors 68040

    AngerDanger

    Joined:
    Dec 9, 2008
    #7
    How are people managing to get away with such simple passwords? I take the XKCD approach to password creation—a sentence comprised of nonsensical but easy to remember words. By the time I get done setting up an account, however, I've had to add a number, a capital letter, and a symbol. They only make my originally strong password harder for me to remember.

    [​IMG]
     
  8. Dekema2 macrumors 6502a

    Dekema2

    Joined:
    Jul 27, 2012
    Location:
    WNY or Utica
    #8
    I don't understand why people put the least amount of effort into securing the most vulnerable parts of their lives.
     
  9. fathergll macrumors 65816

    Joined:
    Sep 3, 2014
  10. L-Viz macrumors 6502

    L-Viz

    Joined:
    Apr 28, 2017
    #10
    I am always safe with the "user" "admin" combo :)
     
  11. yaxomoxay macrumors 68030

    yaxomoxay

    Joined:
    Mar 3, 2010
    Location:
    Texas
  12. brofkand macrumors 6502

    Joined:
    Jun 11, 2006
    #12
    Free password managers like iCloud Keychain, Bitwarden, etc., make remembering passwords obsolete. There is no excuse to have poor passwords in 2018.
    --- Post Merged, Dec 14, 2018 ---
    That was great advice before the advent of cross platform secure password managers, but today I'd say using a password manager to generate a random high entropy password is a better solution, ideally coupled with a second factor for sensitive data like banking or sites with payment methods attached.
     
  13. bytethese macrumors 68030

    bytethese

    Joined:
    Jun 20, 2007
    #13
    Really happy and sad at the same time that two people beat me to the Spaceballs references. :)
     
  14. Junipr, Dec 14, 2018
    Last edited: Dec 14, 2018

    Junipr macrumors regular

    Junipr

    Joined:
    May 4, 2011
    #14
    Older Coworkers: “I use one password for everything...”

    Me: “Nice! 1Password is a great password management app”

    OC: “No app, just the same password every time...”

    Me: *facepalm*
     
  15. EdT macrumors 65816

    EdT

    Joined:
    Mar 11, 2007
    Location:
    Omaha, NE
    #15
    The problem with the XKCD cartoon is companies saw his suggestion and wrote requirements for a valid password that mess up the idea. Such as, can’t have 2 numbers next to each other or they can’t be sequential or you must have one of a few specific characters in your password or you cannot have some characters etc.
     
  16. WannaGoMac macrumors 68020

    WannaGoMac

    Joined:
    Feb 11, 2007
    #16
    How did they collect the counts to make this list?
    Looks like they just came up with the list of passwords themselves, no actual survey or counting from password leaks.
    FUD
     
  17. brofkand macrumors 6502

    Joined:
    Jun 11, 2006
    #17
    It's discussed in the article MacRumors linked to. In the first few sentences no less.
     
  18. tromboneaholic Suspended

    tromboneaholic

    Joined:
    Jun 9, 2004
    Location:
    Clearwater, FL
    #18
    With Face ID, my password is my face.
    --- Post Merged, Dec 14, 2018 ---
    Worst Password of the Year
     
  19. Xenomorph macrumors 65816

    Xenomorph

    Joined:
    Aug 6, 2008
    Location:
    St. Louis
    #19
    I know it's overused (and mentioned already in this thread), but the reference still manages to pop up with IT at work.

    1, 2, 3, 4, 5? That's amazing! I've got the same combination on my luggage!
     
  20. WannaGoMac macrumors 68020

    WannaGoMac

    Joined:
    Feb 11, 2007
    #20
    When I click the link all i see is an article list of 100 passwords with pictures making fun of them, then a video to play (which I refuse to do).


    edit: Looks like macrumors changed the URL link as now it goes to an article and not the direct list.

    p.s. What moron thought light grey text on a white page was a good idea?
     
  21. Parystec macrumors member

    Parystec

    Joined:
    Mar 30, 2011
    Location:
    UK
    #21
    That was lucky. I had forgotten my passwords. Then found this list of all my 10 passwords :)
     
  22. mattopotamus macrumors G5

    mattopotamus

    Joined:
    Jun 12, 2012
    #22
    Why people are not using an app with password generators confuses me.
     
  23. blacktape242 macrumors 65816

    blacktape242

    Joined:
    Dec 17, 2010
    Location:
    Sacramento, CA
    #23
    you beat me to it!
     
  24. MhaelK macrumors newbie

    Joined:
    Jan 21, 2015
    #24
    Huhuuuu, I won again - my password is number one on the list!!!
     
  25. NinjaHERO macrumors 6502a

    NinjaHERO

    Joined:
    Aug 29, 2008
    Location:
    U S of A
    #25
    While I'd never use one of these passwords personally, I totally get some people's frustration. My job requires us to change multiple passwords every 3 months. At some point you get tired of making stuff up.
     

Share This Page