mine isn’t “123456″
Posted in General, security on January 26th, 2010 by Eddie – Comments OffI have a lot of passwords. I can’t count them anymore but, considering I have a double-digit number of email accounts, I’d say I probably have double-digit numbers of passwords, too.
For a lot of people, when they have a lot of passwords, or even when they don’t have many, their first temptation is to have just one, simple password that works for all their accounts. It sounds like a good idea but, it can backfire. If someone discovers one of those passwords, it’s not difficult to try to use that password elsewhere on your accounts. And, unless you keep a log of when you log into an account and check that account for login records, it’s unlikely you’ll know when someone does try to use your account, successfully or otherwise.
Even worse, you may use a ridiculously simple password. We all should know the basics of a good password.
- at least eight characters long … longer is probably better
- nothing in your password based on simple dictionary words … phrases that mean something to you but no one else are a good start
- a mix of lowercase and capital letters, maybe even punctuation marks thrown in, if the account allows them
- at leats one or two numbers mixed in … and, no, the number shouldn’t be just at the beginning or end of the password
Researchers from data protection firm Imperva analyzed password practices from millions of users based upon a security breach at social application site RockYou and found that the most common (and insecure) password is (drum roll, please): “123456″
Similar other analysis of email passwords had “123456″ top their list of most common passwords, too.
It’s disappointing that, with today’s newsbites of online security breaches, some of us still use easy-to-crack passwords. Granted, this analysis is limited to just one site and many probably don’t consider their social applications to be mission critical, but it’s important to get into the habit of protecting privacy as much as possible and a lot of it starts with passwords. You may not feel your Facebook account is mission critical but you’ll still feel angry if your account with an insecure password gets hacked because your password is “123456.” And, at the same time, sites that contain personal information need to start enforcing better passwords or, at minimum, posting a big notice if you happen to choose an insecure password.
By the way, the second most common password in the Imperva analysis is “12345.” “123456789″ came in third, and “Password” came in fourth. “iloveyou” was fifth.
