Watch CBS News

WTF: Millions Still Using '123456' as Their Password


How's this for weird? Recently, some 32 million passwords were stolen from social-networking service RockYou and released into the wild by the hacker who nabbed them. Data-security firm Imperva analyzed the collection and made a shocking discovery -- shocking, at least, to those of us who have been preaching about password security for years.

According to Imperva, the most commonly used passwords were as follows:

  1. 123456
  2. 12345
  3. 123456789
  4. Password
  5. iloveyou
  6. princess
  7. rockyou
  8. 1234567
  9. 12345678
  10. abc123
Excuse me while I collect my jaw from the ground. I'd like to think these shockingly poor passwords choices stem can be easily explained, that most visitors to a site like RockYou are A) kids or B) looky-loos, both of whom don't know better or don't care about password security for that particular destination.

But I suspect it's part of the ongoing epidemic of users who just don't have a clue when it comes to choosing secure passwords. If you happen to be one of them (or know someone who is), please see any or all of these previous posts on the subject:

While you're at it, download Imperva's report: Consumer Password Worst Practices. It's interesting, and informative, reading.
View CBS News In
CBS News App Open
Chrome Safari Continue
Be the first to know
Get browser notifications for breaking news, live events, and exclusive reporting.