Filtered by: Scitech
SciTech

For 2013, '123456' unseats 'password' as worst password


(Updated Jan. 25, 11:37 a.m.) In 2013, users of online services such as emails and social accounts got a little better in choosing the passwords that would protect their online presence - but not by much.
 
Don't try this at home. Graphic by Analyn Perez
 
Password management app maker SplashData said its analysis of stolen passwords posted online in 2013 showed "123456" replacing "password" as the year's worst password.
 
The company, in unveiling its annual worst password list, also noted many of 2013's worst passwords had been based on the app or website being accessed.
 
"Seeing passwords like 'adobe123' and 'photoshop' on this list offers a good reminder not to base your password on the name of the website or application you are accessing," said CEO Morgan Slain.
 
Slain added another interesting finding from this year's list was that more short numerical passwords showed up despite websites enforcing stronger password policies.
 
Relatively new easily guessable passwords in the 2013 list include "1234" at (16th), "12345" (20th), and "000000" (25th).
 
The list is being released annually in hopes people will think of stronger passwords for their online accounts.
 
"As always, we hope that with more publicity about how risky it is to use weak passwords, more people will start taking simple steps to protect themselves by using stronger passwords and using different passwords for different websites," SplashData said.
 
'Password' dethroned
 
Until 2013, SplashData said "123456" had figured as the runner-up to "password" but finally managed to come out on top, with "password" falling to second place.
 
Other weak passwords included "qwerty," "abc123," "111111," and "iloveyou."
 
SplashData's 25 worst passwords of 2013 include:
 
  • 123456
  • password
  • 12345678
  • qwerty
  • abc123
  • 123456789 (new to list)
  • 111111
  • 1234567
  • iloveyou
  • adobe123 (new)
  • 123123
  • admin (new)
  • 1234567890 (new)
  • letmein
  • photoshop (new)
  • 1234 (new)
  • monkey
  • shadow
  • sunshine
  • 12345 (new)
  • password1
  • princess (new)
  • azerty (new)
  • trustno1
  • 000000 (new)
 
Safety tips
 
SplashData said the top 25 list was based on files containing millions of stolen passwords posted online in 2013.
 
The company suggested strengthening passwords by:
 
  • using passwords of eight characters or more with mixed types of characters.
  • using passphrases with short words with spaces or other characters separating them.
  • avoiding using the same username/password combination for multiple websites.
  • using a password manager application that organizes and protects passwords and can automatically log you into websites.
 
A separate report on Ars Technica said the SplashData list is "a good reminder that many Internet users are practically begging to be hacked." —ELR, GMA News
More Videos