Accessibility links
  • Skip to main content
News Icon NEWS FILTER
All News Scams & Phishing Security Education Videos Mobile Security Your Security Education Identity Theft Corporate Security
Search Icon SEARCH
 

Email Icon SUBSCRIBE TO WEEKLY NEWSLETTER
Revealed: We Are Still Terrible At Creating Passwords
Facebook   X   LinkedIn   Email

Revealed: We Are Still Terrible At Creating Passwords

March 10, 2025

Ah, passwords. Those tiny digital keys that can either protect your online kingdom or leave the door wide open for cyber-villains. Unfortunately, 2024 showed us that people are still using shockingly bad passwords. Spoiler alert: "123456," "password," and the oh-so-creative "qwerty123" remain top offenders. In fact, “123456” takes the top spot year after year. Seriously, folks? You can do better than that.

In case you’re curious, NordPass, who says that 78% of the most common passwords have the potential to be cracked in less than one second, has compiled a list of the 200 most used and worst passwords of the last year. After the previously mentioned worst one (and those that are longer versions of it), others on the list are “password,” “qwerty (and “qwerty 123,” “qwerty1234,” etc.), the ever so charming “iloveyou” and “lovely,” “football,” and other sports, and a personal favorite “letmein.”

Hackers are practically throwing a party when they see passwords like these! If your password can be guessed faster than you can say "oops," it's time for an upgrade. Here's how to level up your password game and keep those digital baddies out of your accounts:

1.     Go Long or Go Home: Make your passwords at least eight characters. The longer, the better.

2.     Mix It Up: Use a chaotic blend of uppercase, lowercase, numbers, and symbols. A password like "B3!nG_Cr34t!vE" is far harder to crack than "iloveyou."

3.     No Sherlock Clues: Avoid personal details like birthdays, pet names, or your favorite band's name. If it's on your social media, it's off-limits for your passwords.

4.     The One-Pass Wonder? Nope: Don't reuse passwords across multiple sites. If one gets compromised, it's like handing out copies of your house key.

5.     Get Creative with Passphrases: Combine random words for a quirky, secure password like "BananaRocket$SalsaDance." That’s a pretty good one.

6.     Password Managers = Lifesavers: These tools generate and remember ridiculously strong passwords, so you don't have to. But, remember if these get breached, so too do all of your passwords. So, use with caution.

7.     Two-Factor Authentication FTW: Add an extra layer of defense by enabling MFA wherever possible. Think of it as a double lock on your door. While a one-time text code is good, hardware keys or authenticator apps are much better.

Remember, your password is your digital superhero cape—make it strong enough to keep those cybercriminals at bay. Stay safe and stay creative


How To Create A Strong And Unique  Password For Every Account

Education

How To Create A Strong And Unique Password For Every Account

Most of us know by now not to use the same passwords for different accounts; yet some of us still do. But users who continue to use passwords they know have been exposed in a hack are truly flirting with danger. In a recent study, Google found 1.5% of passwords are still being used despite those users knowing they’ve been compromised. A security researcher discovered more than 22 million unique passwords and over 770 million email addresses were made public on a popular hacker forum earlier this year. READ FULL STORY

Credential Stuffers Compromise More Than 100K Accounts

Your Security

Credential Stuffers Compromise More Than 100K Accounts

Credential stuffing is a cyber-attack in which stolen user credentials and corresponding passwords are used with brute force to make automated login requests. The stolen user credentials are typically from data breaches that could have happened recently, but also may have occurred long ago. These types of attacks are particularly effective when the same username and password combination is used across multiple websites or services. New York’s attorney general announced that an investigation into credential stuffing had uncovered 1.1 million compromised customer accounts linked to 17 well-known companies. READ FULL STORY

 Storing Passwords In Your Browser…It’s Convenient, BUT Very Risky Too

Your Security

Storing Passwords In Your Browser…It’s Convenient, BUT Very Risky Too

Most of us know that password fatigue can lead to security mishaps and that creating a safe and secure entrance into our personal or work accounts can be a real challenge. Fortunately, security experts also know that safe password use has long been a problem, one that can lead to epic malware infections like ransomware, banking trojans, and more. Popular browsers like Chrome, Firefox, Safari, and Opera offer the option to store passwords for you, but hackers using the malware “RedLine Stealer” can hijack those stored passwords in a heartbeat. READ FULL STORY

Protect Yourself From Phishing Scams: 8 Steps To Better Security

Scams & Phishing

Protect Yourself From Phishing Scams: 8 Steps To Better Security

Since the mid 1990’s, email phishing scams have been on the rise. Like most cybercrimes, hackers have improved and refined their phishing methods over time. Now, there’s been a massive increase in targets due to the continuing coronavirus epidemic. Email phishing continues to be the method of choice for many cybercriminals to enter your device, steal your data, identity, finances, and more. A study by Tessian finds that 96% of phishing attacks arrive via email, showing the threat is very real. READ FULL STORY

Building Strong Passwords Using The “Don’ts” Of Password Security

Your Security

Building Strong Passwords Using The “Don’ts” Of Password Security

Much is made of the importance strong passwords give to online account security, and for good reason. That’s because password cracking is often the first step for a hacker looking to break into an account – your account. A formidable password can make a cybercriminal give-up and move onto the next potential victim. But what’s also important and often overlooked is what not to do when creating a password. Consider the “don’ts” of weak password creation as reminders of what not to do. READ FULL STORY








Close
Fraud News & Alerts!

Keep up with the latest cyber security news through our weekly Fraud News & Alerts updates. Each week you will receive an email containing the latest cyber security news, tips and breach notifications.



You're all set!

You will receive your first official security update email within the next week.

A welcome email has also just been sent to you. If you do not receive this email within the next few minutes, please check your Junk box or spam filter to confirm our emails are not being blocked.


 
Help  
Enter any word or words you like.        

The email newsletter will arrive from news@stickleyonsecurity.com


Loading
Please wait...