Skip to content

Unveiling the 20 Most Common, Inesecure Passwords in the U.S. - Reconsider Your Password if It's Among Them

Check if your password appears on the list immediately.

List of the 20 Least Secure Passwords in America: Adjust Yours if It's Included
List of the 20 Least Secure Passwords in America: Adjust Yours if It's Included

Unveiling the 20 Most Common, Inesecure Passwords in the U.S. - Reconsider Your Password if It's Among Them

In the digital age, the importance of online security cannot be overstated. However, a widespread issue persists: weak passwords. This concern is not limited to specific platforms, such as Google or Gmail, but encompasses the internet as a whole.

Recent studies have highlighted the significance of two-factor authentication (2FA), not relying on SMS, and passkeys in enhancing security. Yet, it's crucial to remember that strong, unique passwords remain the fundamental building block of online protection.

Two-factor authentication, combined with a passkey, can bolster defences, but passwords should never be overlooked. It's essential to replace weak passwords with strong, unique ones that are not used across any other accounts.

NordPass, a password manager, has released lists of the worst passwords for both personal and work accounts in the United States. Notably, many passwords are rarely changed, making them vulnerable to hackers.

The Google breach warning in news feeds is not due to leaked passwords, but rather the infrequent change of passwords across multiple accounts. This pattern exposes users to potential risks, as hackers can exploit this vulnerability.

Enterprises and their systems are also at risk due to weak passwords. Many enterprises mandate 2FA for key systems, which protects against over 99% of intrusions. However, without proper password practices, even the most secure systems can be compromised.

A weak or reused password can serve as an initial access point for ransomware attacks against an organization. Recent ransomware attacks have even used social engineering to steal 2FA codes instead of relying on technical exploits.

The risk of using common, weak passwords, such as "123456" or "password", is particularly high on popular platforms like Google, Meta/Facebook, or Amazon, especially when 2FA is not mandatory or when SMS one-time codes are used for 2FA.

In Germany, the 20 most frequently used passwords among users, representing a significant security risk, typically include weak number sequences and common words. Simple numeric or predictable combinations, such as "123456", "hallo", "passwort", and "111111", should be avoided.

To mitigate these risks, it's recommended to add an authenticator app for 2FA and a passkey for all accounts where possible. Moreover, using a standalone password manager is advised, not one built into a browser.

If any of your passwords are on either list, they should be changed immediately to ensure the highest level of online security. By taking these steps, users can significantly reduce their risk of falling victim to cyber attacks.

Read also: