A fifth of passwords used by federal agency cracked in security audit
From the article:
The most commonly used passwords, followed by the number of users, were:
Password-1234 | 478
Br0nc0$2012 | 389
Password123$ | 318
Password1234 | 274
Summ3rSun2020! | 191
0rlando_0000 | 160
Password1234! | 150
ChangeIt123 | 140
1234password$ | 138
ChangeItN0w! | 130
I’m sort inclined to think some of these were reset passwords and people just kept using. Like IT reset your password and you’re supposed to change it and they never did. There are just so many systems that prevent that it’s hard to believe that in government no one bothered to trigger them.
I’m not a big fan of hardware keys myself. But honestly at government jobs. They should fork out the money, give them to the employees so they don’t have to remember good passwords and they’ll actually be secure.