But before users learn how to make a strong password, they should know what makes a password weak. Only then will they understand how to avoid the common security pitfalls that lead to leaked passwords and breached accounts. Let’s take a look at some of the most common (i.e, least secure) passwords and how to determine if yours was breached.
What are the most commonly breached passwords of 2020?
We’re taught to choose passwords that are obscure and hard to crack, which is why it may come as a surprise that many people use the same popular passwords. And in the world of cybersecurity, popular means insecure. Here are some of the most popular passwords of 2020:
123456 123456789 qwerty password 1234567 12345678 12345 iloveyou 111111 123123
As you can tell, there is a method to the madness behind lazy passwords. Strings of sequential numbers and simple phrases like “iloveyou” and “password” top the list.
Has your password been breached? Find out on Have I Been Pwned
There’s an easy way to find out if your password was hacked: look it up on Have I Been Pwned. Start by simply typing your password into this user-friendly site. Next, Have I Been Pwned will scour its database of breached passwords to see if yours appears in the hoard of stolen log-in credentials. To date, Have I Been Pwned has information on 10,093,204,490 “pwned accounts” from 457 breached websites. It’s up-to-date on major hacks on websites like MySpace, LiveJournal, Comcast and more — you can view the full list of breached websites here.
How to protect yourself from a password breach
If all this talk of hacked passwords has you down, you can rest assured that there are steps you can take to protect yourself from would-be hackers. Create a unique password: Don’t use one of the passwords included on this list. Instead, choose something unique and, ideally, something that isn’t well-known about you. Persistent hackers aren’t above combing your social media profiles for tidbits of information that people commonly use in their passwords, like their birthday, dog’s name or favorite vacation spot. Never reuse passwords: When you use the same password for all of your accounts, a hacker only needs to stumble upon a single instance of that password in order to access a multitude of accounts. Use a password manager: You can seriously step up your password protection game by investing in a password manager. A password manager is a program that generates complex, lengthy passwords. Plus, it even stores them so you don’t have to memorize a 50-digit string of random numbers and letters. Popular password managers include Dashlane, LastPass and 1Password. Enable two-factor authentication: Every additional layer of security you add to your account is like an extra wall that an intruder has to climb over. Two-factor authentication is a security feature that loops in your cell phone. After you enter your password, but before you’re granted access to the account, you’ll receive a security code via text. Only someone who has access to your phone can cross the final threshold into your account.
Conclusion: What’s a hacker’s worst nightmare? Educated end users
It’s easy for hackers to sweep in and steal passwords from thousands of unsuspecting people. But when those end users know how to keep their accounts protected with strong passwords and password managers, a hacker’s job becomes infinitely harder. With the right education and tools, you can keep your data out of the hands of cybercriminals and your password off the list of most frequently breached passwords.
Sources
The most common passwords 2020, Rock IT Collection #1, HaveIBeenPwned
