NP Rank:
Ten Worst Internet Passwords: Change or Get Hacked
Data security firm Imperva has analyzed the attack on RockYou that took place last year. Imperva found out that, not only do people choose easy-to-guess passwords, they reuse those passwords across multiple services. For example, someone may be using "12345" as their Facebook password as well as the security key to a private office intranet. Not smart, since those simple passwords are the first to crumble before an automated attack.
Here are the ten worst Internet passwords found in the RockYou hack analysis:
- 123456
- 12345
- 123456789 (WTF?)
- Password (seriously?!)
- iloveyou (so do hackers)
- princess
- rockyou (or "facebook" for Facebook, etc- this is really stupid, sorry)
- 1234567
- 12345678
- abc123
So, statistically, your password sucks. This also holds true with Wi-Fi networks. Either leave your network open or choose a decent password. If you still have your network password set to factory default, then you're crackable like a walnut. Yes, these work. Yes, everyone knows about it.
So, how do you create a secure password? Easy, actually: keep it random, and mix up the numbers, letters and capitalization. Change the password a few times a year. Don't use letter or number sequences. Don't use any word that can be found in the dictionary. Don't include the service's name in your password. Change your crappy password before you get pwned.
“The problem has changed very little over the past 20 years. It’s time for everyone to take password security seriously; it’s an important first step in data security.”
NowPublic on Facebook
Crowd Power
-
Jordan Yerman
Vancouver, British Columbia, Canada
Recommendations (12)
-
Hugh Askew
Omaha, Nebraska, United States -
Karl Gotthardt - albertacowpoke
Redwater, Alberta, Canada




Most RecentMost Recommended Comments (2)
at 10:44 on January 22nd, 2010
Anyone else here reading “I.T. WARS”? The book speaks of making everyone a "mini security officer," - something that makes sense in this day and age. Obviously, qualified security officers wouldn't be creating passwords along the lines of "123456". I had to read parts of this book as part of my employee orientation at a new job. The book talks about a whole new culture as being necessary – an eCulture – for a true understanding of security, being that most identity/data breaches are due to simple human errors – I think most system outages are too. The field of Security is going to explode: consider the "blended environments" whereby personal assets (such as laptops for weekend and 'on the road' work) and outside social networking sites (such as Twitter and Facebook) are increasingly utilized by Business. The book has great chapters on security, as well as risk, content management, project management, acceptable use, various plans and policies, and so on. Just Google “IT WARS” – check out a couple links down and read the interview with the author David Scott. (Full title is “I.T. WARS: Managing the Business-Technology Weave in the New Millennium”).
at 10:49 on January 22nd, 2010
Reminds me of all the people using "Joshua" as a password after seeing War Games. =)