‘Password’ is no longer the worst password on the internet, researchers have discovered.
However, they warn the new ‘worst password’, 123456, is just as insecure.
The team at SplashData analysed millions of stolen passwords posted online in 2013 to compile their annual list of the worst.
‘For the first time since SplashData began compiling its annual list, ‘password’ has lost its title as the most common and therefore Worst Password, and two-time runner-up “123456” took the dubious honour,’ the security firm said.
However, ‘password’ only fell to number two on the list.
According to SplashData, this year’s list was influenced by the large number of passwords from Adobe users posted online by security consulting firm Stricture Consulting Group following Adobe’s well publicized security breach.
‘Seeing passwords like ‘adobe123’ and ‘photoshop’ on this list offers a good reminder not to base your password on the name of the website or application you are accessing,’ says Morgan Slain, CEO of SplashData.
Other passwords in the Top Ten include ‘qwerty,’ ‘abc123,’ ‘111111,’ and ‘iloveyou.’
‘Another interesting aspect of this year’s list is that more short numerical passwords showed up even though websites are starting to enforce stronger password policies,’ Slain said.
For example, new to this year’s list are simple and easily guessable passwords like “1234” at #16, “12345” at #20, and “000000” at #25.
The firm said it publishes the list annually to try and get people to change their passwords to more secure phrases.
‘As always, we hope that with more publicity about how risky it is to use weak passwords, more people will start taking simple steps to protect themselves by using stronger passwords and using different passwords for different websites,’ the firm said.
The company advises consumers or businesses using any of the passwords on the list to change them immediately.
‘Use passwords of eight characters or more with mixed types of characters,’ it says.
‘But even passwords with common substitutions like “dr4mat1c” can be vulnerable to attackers’ increasingly sophisticated technology, and random combinations like “j%7K&yPx$” can be difficult to remember.
‘One way to create more secure passwords that are easy to recall is to use passphrases — short words with spaces or other characters separating them. It’s best to use random words rather than common phrases. For example, “cakes years birthday” or “smiles_light_skip?”
‘Avoid using the same username/password combination for multiple websites.
‘Especially risky is using the same password for entertainment sites that you do for online email, social networking, or financial service sites.
‘Use different passwords for each new website or service you sign up for.’
HOW TO CHOOSE A PASSWORD
- Use passwords of eight characters or more with mixed types of characters.
- Use passphrases — short words with spaces or other characters separating them. It’s best to use random words rather than common phrases. For example, “cakes years birthday” or “smiles_light_skip?”
- Avoid using the same username/password combination for multiple websites.
