Cybersecurity experts warn against weak and repetitive passwords

An analysis by the Alan Boswell Group, utilizing data from the website ‘Have I Been Pwned’, highlights the persistent issue of weak password usage. Despite warnings from security researchers, common combinations such as ‘123456’, ‘admin’, and terms from pop culture or sports remain highly prevalent. This vulnerability poses significant risks to both private individuals and corporations, as leaked credentials are frequently traded on the darknet.

To mitigate these risks, cybersecurity guidelines from organizations like the National Institute of Standards and Technology (NIST) and the German Federal Office for Information Security (BSI) emphasize length over strict complexity. Experts recommend either short, complex passwords of 8–12 characters or long passphrases of 20–25 characters consisting of random words. Additionally, using unique passwords for every account and implementing two-factor authentication (2FA) are considered essential practices for maintaining digital security.