Compiled from files containing millions of stolen passwords, SplashData have released a list of the world’s worst passwords. Here they are …

SplashData’s “Worst Passwords of 2013”

For the first time in years, “password” has dropped from its number 1 slot. And a couple of newcomers — “adobe123” and “photoshop” — no doubt reflect the heist of 2.9 million Adobe passwords last October.

Unfortunately, there’s one key element missing from the data: the actual frequency the passwords are used. “123456” might be top of the heap, but if only 0.01% of ten million users use it, it’s not terribly significant. However, if it featured in 5% of all captured passwords, then it’s a cause for concern.

And then there’s institutions that seem to actively discourage using decent passwords. Banks, for example. Many restrict internet passwords to 8 characters — so you can’t use vastly more secure pass-phrases like “most_bankers_are_bastards” — and you must use only alphabetic characters and numbers. No underscores, ampersands, exclamation marks or the like are permitted. But the hell, it’s only money. If someone does crack your account, no doubt their security policy will say it’s your fault.

Still, if you’re using dumb passwords like “1234” and “000000”, you really are asking for trouble!

Share this ...