Cybersecurity experts warn against password reuse and data breaches

Cybersecurity experts are warning against common password vulnerabilities, such as reusing credentials across multiple platforms and using weak combinations like ‘123456’ or ‘password’. Data breaches allow attackers to use automated bots for credential stuffing, where stolen login information is tested across various services to gain unauthorized access. A 2024 Forbes Advisor study indicated that 46% of Americans had a password stolen within the past year.

To mitigate these risks, experts recommend several security measures:

• Using unique, complex passwords or long passphrases for every account. • Utilizing password managers to store and generate credentials securely. • Enabling two-step verification (2FA).

There is also a growing industry shift toward passkeys. Unlike traditional passwords, which are vulnerable to server-side breaches and phishing, passkeys use a public-private key pair generated on a user's device. This method ensures that the private key is never shared with websites, making them more resilient to phishing and SIM spoofing attacks. Companies like Microsoft are already moving toward phasing out SMS and voice authentication in favor of more secure methods.