Ten Worst Internet Passwords: Change or Get Hacked

by Jordan Yerman | January 22, 2010 at 09:09 am
745 views | 12 Recommendations | 2 comments

Videos

1, 2, 3, 4, 5

see larger video

sourced by Jordan Yerman

1, 2, 3, 4, 5

Data security firm Imperva has analyzed the attack on RockYou that took place last year. Imperva found out that, not only do people choose easy-to-guess passwords, they reuse those passwords across multiple services. For example, someone may be using "12345" as their Facebook password as well as the security key to a private office intranet. Not smart, since those simple passwords are the first to crumble before an automated attack.
Here are the ten worst Internet passwords found in the RockYou hack analysis:

  1. 123456
  2. 12345
  3. 123456789 (WTF?)
  4. Password (seriously?!)
  5. iloveyou (so do hackers)
  6. princess
  7. rockyou (or "facebook" for Facebook, etc- this is really stupid, sorry)
  8. 1234567
  9. 12345678
  10. abc123

So, statistically, your password sucks. This also holds true with Wi-Fi networks. Either leave your network open or choose a decent password. If you still have your network password set to factory default, then you're crackable like a walnut. Yes, these work. Yes, everyone knows about it.

So, how do you create a secure password? Easy, actually: keep it random, and mix up the numbers, letters and capitalization. Change the password a few times a year. Don't use letter or number sequences. Don't use any word that can be found in the dictionary. Don't include the service's name in your password. Change your crappy password before you get pwned.

“The problem has changed very little over the past 20 years. It’s time for everyone to take password security seriously; it’s an important first step in data security.”
Advertisement
recommend This comment thread is now closed
0
Janice Taylor Gaines

Anyone else here reading “I.T. WARS”?  The book speaks of making everyone a "mini security officer," - something that makes sense in this day and age.  Obviously, qualified security officers wouldn't be creating passwords along the lines of "123456".  I had to read parts of this book as part of my employee orientation at a new job.  The book talks about a whole new culture as being necessary – an eCulture – for a true understanding of security, being that most identity/data breaches are due to simple human errors – I think most system outages are too.  The field of Security is going to explode:  consider the "blended environments" whereby personal assets (such as laptops for weekend and 'on the road' work) and outside social networking sites (such as Twitter and Facebook) are increasingly utilized by Business.  The book has great chapters on security, as well as risk, content management, project management, acceptable use, various plans and policies, and so on.  Just Google “IT WARS” – check out a couple links down and read the interview with the author David Scott. (Full title is “I.T. WARS: Managing the Business-Technology Weave in the New Millennium”).

0
rbyrnes

Reminds me of all the people using "Joshua" as a password after seeing War Games. =)

This story was created over 3 months ago, the comment thread is now closed.

NowPublic on Facebook

What is NowPublic?

NowPublic lets people work together to cover news events around the world.

Find out more

Crowd Power

Karl Gotthardt - albertacowpoke
First Flagged at 4:05 PM, Jan 22, 2010 by Karl Gotthardt - albertacowpoke
These members have powered this story:

Related Stories

Recommendations (12)

Most recently recommended by:
 

closeSign in to NowPublic

is reporting from