Alexis Kestler
Hey there!
As your trusted cybersecurity guide, I want to have a quick chat about something super important – using strong, unique passwords.
I know, passwords can be a drag. But trust me, taking the time to create good ones is so critical for protecting your online accounts. Let‘s look at 10 really common (and dangerous) passwords you need to stop using ASAP:
1. 123456
I know this simple 6-digit pattern is tempting for its sheer simplicity. But believe me, it‘s an absolute no-go. Studies show ‘123456‘ is the most commonly used password – which means it‘s the first thing hackers will try. In less than 1 second, this weak password can be cracked.
2. password
You‘d be shocked how many people actually use ‘password‘ as their password! I don‘t have to tell you what a bad idea this is. Pro tip: avoid using literal password-related words like ‘password‘, ‘login‘, ‘account‘, etc. They‘re way too easy for hacking software to guess.
3. 123456789
Sure, tacking on a few extra numbers creates a longer password. But longer does not equal stronger! Lengthy sequences like ‘123456789‘ are still highly vulnerable to automated hacking attempts.
4. qwerty
Fun fact: ‘QWERTY‘ is the pattern of letters on a standard keyboard. Many folks use the same sequence for their password, thinking it‘s clever. Unfortunately, hackers are onto this trick, making it one of the weaker options out there.
5. 12345
I know this little 5-digit code looks innocent enough. But believe it or not, it’s one of the most commonly brute-forced passwords. Studies show about 3% of people use ‘12345’ to protect accounts – don’t be one of them!
6. 12345678
You might be sensing a pattern here. Any sequence of numbers in ascending or descending order simply won‘t cut it for a strong password. ‘12345678‘ is essentially just as weak as ‘1234567‘ or ‘123456789‘.
7. baseball
Now this surprised me – ‘baseball‘ is the most common sports-themed password out there. Referencing your hobbies may seem like an easy way to remember passwords, but it also makes them easier to guess!
8. dragon
Did you know ‘dragon‘ is the most popular mythical creature used in passwords? Cute idea, but this common word is ripe for the hacking. Obscure references have a better shot at being secure.
9. password1
Throwing a ‘1‘ or any other single digit onto a basic password like ‘password‘ is one of the most common tricks people try. But it adds very little strength against sophisticated hacking tools designed to crack these simple mutations.
10. 1234567
Yep, you guessed it – extending a numerical sequence out a few extra digits does very little to improve its security. ‘1234567‘ will be cracked just as quickly as ‘123456‘. Stick to truly random numbers.
By the Numbers: Most Common Passwords
A team of researchers analyzed over 50 million leaked passwords to determine the most prevalent choices. Here are a few stats that stood out:
-
The top 2 most common passwords (‘123456‘ and ‘password‘) account for over 2% of leaked passwords each
-
The top 10 most common passwords make up almost 15% of all breached passwords.
-
About half of all passwords contain only lowercase letters with no numbers or special characters.
-
80% of accounts use one of the top 1,000 most common passwords
As you can see, most people rely on very weak, predictable passwords. Don‘t be like most people! The following sections will guide you to the password promised land.
Before we dive into password best practices, let‘s review why weak passwords cause problems:
Account Takeover
If hackers gain access to your accounts by cracking your password, they can impersonate you online and access private data. Very not good!
Identity Theft
With access to your accounts, cybercriminals can steal your personal info to open fraudulent accounts and make purchases in your name.
Financial Loss
Weak passwords put bank accounts and payment info at risk. Getting hacked can mean losing real money!
Malware/Ransomware Attacks
Infected devices can spread malware throughout networks and organizations. Next thing you know, everything is locked down until you pay the ransom!
Data Breaches
Private communications, photos, documents and more are exposed if emails, cloud storage, or social media are compromised due to poor passwords.
Ready to step up your password game? Follow my tips below to start creating ultra-secure passwords:
Length is Key
Longer is stronger when it comes to passwords. Use at least 12 characters, but 15-20 characters is ideal for maximum strength. The longer the password, the more encryptions a hacker has to crack.
Randomize It
ditch patterns and sequences by mixing random upper and lower case letters, numbers, and symbols. Unpredictability is strength!
Go Full Unique
Every account deserves its own crazy complex password. Never reuse the same password twice (but don‘t worry – I‘ll cover password managers later to help with this).
Slice and Dice It
One of my favorite tricks – take a phrase, quote or lyric and use the first letter from each word. Add spacing for length!
For example: "To be or not to be, that is the question" becomes:
Tbonttb,titq
Get Creative
Come up with your own funky password schemes, like substituting characters for letters (M0v13$truck), combining words (PinkFluffyUnicorns), or alternating caps (sChOoLBuS).
Use a Password Manager
Let an encrypted password manager app generate and store long, randomized passwords for you. LastPass, 1Password and Dashlane are great options.
Enable Two-Factor Authentication
For extra account security, turn on 2FA. It requires both your password and a temporary code sent to your phone to log in.
Here are a few good password hygiene habits:
-
Update passwords every 90 days
-
Change immediately if you suspect an account has been compromised
-
Don‘t reuse old passwords – completely new ones each time
-
Use different passwords for your most important accounts
Whew – that was a lot of password talk! Here‘s a quick summary:
✅ Use long, complex, unique passwords
✅ Enable two-factor authentication
✅ Use a password manager to generate and store passwords
✅ Change passwords regularly
❌ Avoid common passwords like ‘123456‘ or ‘password‘
❌ Never reuse passwords across multiple accounts
With strong, unique passwords for all your online accounts, you‘ll be well protected against hackers. Let me know if you have any other password questions! I‘m always happy to nerd out on cybersecurity.
Stay safe out there,
[Your Name]