{"id":1518,"date":"2017-01-16T14:48:41","date_gmt":"2017-01-16T18:48:41","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=1518"},"modified":"2017-01-16T14:53:54","modified_gmt":"2017-01-16T18:53:54","slug":"worst-passwords-2016","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/worst-passwords-2016\/","title":{"rendered":"2016’s Worst Passwords Are In, And The Results Are Embarrassing."},"content":{"rendered":"

\"worst-passwords-2016\"It\u2019s that time again, where, with a whole new year’s worth of uncertainty ahead, we collectively look back on the past year and face just how terrible we really were\u2026.at coming up with secure passwords.<\/p>\n

Last year, SplashData did the dirty work<\/a>, but this time around it was the security team at password manager Keeper<\/a> who stepped up to the plate to bring us The Worst Passwords of 2016. The results? Just as terrible as we\u2019ve come to\u00a0expect.<\/p>\n

\u00a0The list, culled from more than 10 million passwords that became public through data breaches that happened in 2016, identified the year\u2019s 25 most common passwords, which were:<\/p>\n

    \n
  1. 123456<\/li>\n
  2. 123456789<\/li>\n
  3. qwerty<\/li>\n
  4. 12345678<\/li>\n
  5. 111111<\/li>\n
  6. 1234567890<\/li>\n
  7. 1234567<\/li>\n
  8. password<\/li>\n
  9. 123123<\/li>\n
  10. 987654321<\/li>\n
  11. qwertyuiop<\/li>\n
  12. mynoob<\/li>\n
  13. 123321<\/li>\n
  14. 666666<\/li>\n
  15. 18atcskd2w<\/li>\n
  16. 7777777<\/li>\n
  17. 1q2w3e4r<\/li>\n
  18. 654321<\/li>\n
  19. 555555<\/li>\n
  20. 3rjs1la7qe<\/li>\n
  21. google<\/li>\n
  22. 1q2w3e4r5t<\/li>\n
  23. 123qwe<\/li>\n
  24. zxcvbnm<\/li>\n
  25. 1q2w3e<\/li>\n<\/ol>\n

    That\u2019s right, 123456 took the top spot, again. Keeper identified 1.7 million accounts using the perennial favorite\u2014just about 17 percent of the 10 million hacked accounts studied.<\/p>\n

    “Looking at the list of 2016\u2019s most common passwords, we couldn\u2019t stop shaking our heads,” says the Keeper team.<\/p>\n

    \u201cThe list of most frequently used passwords has changed little over the past few years,\u201d Keeper wrote in a blog post. \u201cThat means that user education has limits. While it\u2019s important for users to be aware of risks, a sizable minority are never going to take the time or effort to protect themselves. IT administrators and website operators must do the job for them.\u201d<\/p>\n

    So how can we do better in this brave new year of 2017? Keeper offered up a few basic tips:<\/p>\n

      \n
    1. Use passwords or passphrases of with \u201ca variety of numerical, uppercase lowercase and special characters.\u201d<\/li>\n
    2. Avoid dictionary terms. Using simple words can open you up to dictionary cracks, which test common passphrases such as those found in Keeper\u2019s list, then move through the whole dictionary, says Keeper.<\/li>\n
    3. Use a password manager.<\/li>\n<\/ol>\n

      Here are a few additional obvious tips that I would add:<\/p>\n