I started checking into password statistics. And what I unearthed was quite shocking. Much of the research exposes some very scary statistics about how we create and use passwords. In 2023, the average person will have over 200 online accounts and need a different password for each one. That’s a lot of passwords to remember! And if you’re using the same password for multiple accounts, you’re putting yourself at risk. Hackers are getting smarter every day and can easily crack weak passwords, leading to data breaches, identity theft, financial loss and a whole heap of stress.
The following statistics underscore how we continue to put ourselves at risk. Following the statistics, you’ll find some tips and advice on how to secure your passwords and enhance the security of your personal accounts.
In 2023, the average person will have over 200 online accounts – that’s a lot of passwords to remember and secure!
Our lives are becoming increasingly digitized. We require logins and passwords for banking, online shopping, social media accounts, subscription services, the list goes on. With the average number of passwords per person exceeding 200 now as Dashlane reports, password management is becoming a necessity. How do you remember and manage all your passwords? The statistics below highlight the truth that many of us simply don’t do a good job with password management. Unfortunately, that leads to unsecured, weak passwords and a higher risk of stolen passwords, data breaches and identity theft. Basically a whole heap of stress and potentially financial loss.
People are concerned about password security but don’t really do anything about it
Nine out of ten internet users are worried about their passwords falling into the wrong hands
Avast’s security software study unveiled that a huge 90% of people worry about their passwords being stolen or hacked. Out of those surveyed, 46% expressed “very concerned” sentiments with 44% feeling the same but to a lesser extent. It appears only 8% reported not being overly worried and surprisingly just 2%, felt unconcerned at all. With so many people generally concerned about password hacks, why do so many not take even the most simple steps to secure and strengthen their passwords?
76% of the young generation don’t check for password security
It is astonishing to discover then that 76% of digitally native 18-24 year olds are likely to reuse a password—the highest percentage across any age group (Digital Guardian). People aged 65 and up come in second with 62%. Such security password statistics challenge our expectations. We would probably expect the younger, forward-thinking demographic to understand the importance of online protection measures. But, maybe it is an indication that even though they are aware of the risks and say they are concerned, ultimately convenience and ease trump security.
People understand the risk but continue to take it anyway
As the Psychology of Passwords report shares, people continue to reuse the same passwords across multiple accounts even though they are aware of the risks. In fact, they find that 92% of those that share passwords understand the risk, but do so anyway. The report finds several reasons for this: 52% want to be in control of their passwords so reuse them; 32% don’t think their accounts are valuable enough for hackers to target them; 68% reuse passwords because they’re afraid of forgetting them.
Three quarters of people are frustrated with passwords
Google found that 75% of it’s survey respondents were frustrated with passwords, managing them, remembering them and securing them. So, there’s a real pain point with passwords, but also a complacency in using them. And that leads to some added risks, as we will see.
Hacking and Password Statistics
The 90% of people who are concerned about password security have a right to be. The stats show that poor passwords are an open door for many hacking attacks, as shown in the password statistics below
Poor password security is the cause of over 80% of data breaches
It’s incredible that, as Idagent shares, the vast majority of all data breaches can be traced to poor password security. And data breaches are expensive. Despite the potential for a data breach to cost millions of dollars, too often organizations and individuals fail to take sufficient steps necessary to guard against this risk. Even though some of the measures that can be implemented are simple, free and commonsense.
Approximately one in five social media accounts will be hacked
For many of us, social media has become a way of life, of connecting, communicating and sharing. But according to ZeroFOX, 20% of social media accounts will be compromised. The threat is even greater for accounts owned by brands and businesses, but the stats show that individuals are at risk too. You can reduce the risk of having your social media accounts compromised by regularly updating your passwords, never reusing them, and adding two-factor authentication.
Statistics about Password Habits
1 in 4 people use the same password for all their accounts
It’s a staggering statistic that 1 in 4 people use the same password for all their accounts, putting them at risk of being hacked or having their identities stolen. It’s essential to always use unique passwords as it’s much more difficult for a hacker to guess many different ones rather than one. If you find it challenging to think up unique passwords, there are plenty of password generator tools available online that will help you generate unique combinations, ensuring your private information stays safe and secure.
1 in 3 people have never changed their password
It may come as a surprise, but research has revealed that 1 in 3 people have never once changed their password. Though passwords can be tricky to remember, it’s important for individuals to change them once in a while to ensure the security of their accounts. Additionally, with the ever-evolving cyber landscape, changing passwords frequently is essential for total user safety. Regularly updating your password helps make sure you’re protected from potential security threats. So be sure to change passwords every couple of months — your online data will thank you!
The most common passwords are still “123456” and “password”
Believe it or not, the two most common passwords are still “123456” and “password”. Unfortunately, security experts tell us that these passwords will do nothing to stop hackers from accessing our accounts. If cybercriminals wanted to get into our information, using strong passwords with a combination of numbers, symbols and letters would act as an effective barrier. Everyone needs to be aware of strong password safety measures in order to protect their financial information. So make sure those weak passwords don’t come back to bite you in the future!
Half of all passwords are 8 characters or less
It is incredibly important to secure your accounts by using strong passwords. Acording to Dataprot, a recent study revealed that eight-character passwords make up almost 30% of the 15 billion that were analyzed. Meanwhile, six-character ones accounted for just under 20%. To protect yourself from potential breaches, you should always opt for a lengthy password, definitely with more than eight characters!
60% of people use the same passwords they’ve used elsewhere
It might seem faster and easier to use the same password again and again, but do not do it! According to a recent survey, 60% of people are guilty of reusing passwords in different accounts. This common behavior can put your personal data at risk if one of your accounts is hacked—allowing criminals access to your entire online presence. To protect yourself, always create a unique password for each account you sign up to—it may take a little extra time now but could save you an immense amount of trouble down the line.
Almost 50% of people use their own name or birthday in passwords
According to a recent survey, an astonishing 45% of people use their own name or birthday in password creation. This is an incredibly dangerous practice as these words are easily guessed by cyber criminals—putting your accounts at risk of being compromised. It’s important to create unique passwords that consist of alphanumeric characters and symbols, while avoiding any personal information that could be easily guessed. As an extra precaution, you can also consider implementing a two-factor authentication system for added online security.
Around 15% of people use their first name in their password
When it comes to creating passwords, many people have adopted bad habits that could be putting their personal data at risk. According to recent studies, an alarming 15% of people use their first name in their password. This allows hackers to more simply guess your password, especially when they use phishing techniques sent via SMS or email.
Statistics about securing passwords
Only 30% of people use two-factor authentication
2FA, or two-factor authentication, is an important security measure to protect your online accounts and privacy. Despite this, only about 30% of people are currently using 2FA for their accounts. 2FA adds an extra layer of security beyond the traditional username and password combination to verify your identity, in addition to preventing unauthorized access. This additional step would significantly improve one’s online privacy, but many people still neglect to use 2FA for their accounts. If you’re not already taking advantage of this simple yet effective security measure, now is a great time to get started!
Multi-Factor Authentication blocks 99% of all password safety issues.
As Microsoft has found, almost all password security risks can be eliminated with additional layer of authentication. For heightened security, you can utilize Multi-Factor Authentication (MFA) to access your account. This additional layer of protection requires two or more steps for authentication such as a password, an email code sent to you, and even biometric solutions. With MFA enabled on your accounts, stay confident that only those with the correct credentials will be able to gain entry.
78% of people have forgotten a password and had to reset one in the past 90 days
How recently have you had to hit that “forgotten password” button? Well, you’re not alone. According to HYPR, on average in the last 90 days 57% of people have had to reset a work-based password and 78% of people have had to reset personal passwords.
Statistics about sharing passwords
43% of US internet users shared their passwords with others.
Almost half of the survey users in Google‘s research confessed to sharing a password at least once. While 57% shared it with their spouse or partner, only 11% remembered to change those credentials following divorce. Oops!
69% of employees have shared their passwords with colleagues.
A recent survey shared by Betanews found that an alarming 69% of respondents admitted to sharing passwords with coworkers. This highlights just how commonplace careless employee behavior is and the importance of strong password protection when it comes to preserving online security. Data breaches due to inadequate safety measures are ever-present threats, prompting companies to take action by instilling better habits in their workers.
Password statistics in businesses
Half of all employees share passwords in the workplace
51% of employees in the workplace share passwords with colleagues. What is more startling is that IT security professionals do not fare much better: 49% share their passwords with colleagues (Yubico and Ponemon Institute)
62% of workers have shared their passwords by email or text
A Keeper Security report identifies the shocking statistic that62% of employees have shared their passwords by email or text. Writing own your passwords can be a problem, shoring them with an individual is an even greater risk, but sharing passwords over services that are hosted elsewhere and visible on devices broadens the risks significantly.
Employees reuse passwords across an average of 16 accounts
According to data from Yubico and Ponemon Institute, even in the business environment where the stakes are higher, employees reuse passwords across 16 accounts on average. What is more surprising is the fact that even IT Security professionals reuse passwords across an average of 12 accounts!
42% of IT professionals say their organisation uses sticky notes for password management
The Ponemon Institute unearthed this scary statistic. Yes, the ancient technology of sticky notes aren’t just in use, they are being used to secure incredibly sensitive information!
32% of ex-employees can still login to their former workplace services using old passwords
The first thing a company should do when an employee departs the organisation is disable access to all services. That, at the least, means changing passwords or removing user accounts. But, as Keeper Security discovered, 32% of businesses fail to do so, leaving a major security hole, especially if the employee did not leave on good terms!
59% of IT security professionals say their workplace uses human memory for password management
For a company to have an IT security professional on staff you would think they’d have better password security in place. Again, the Yubico & Ponemon Instiutute report exposes that 59% of IT Security professional say their company depends on human memory alone for password management.
How to protect your personal accounts and online security using better passwords
By taking some time to familiarize yourself with basic password safety measures, you can keep your data secure and protected from potential cyber threats. Regularly updating passwords, avoiding the use of personal information, and utilizing a password manager are just some of the many steps you can take to ensure your accounts stay safe. Here are some helpful tips to get you started:
- Create strong passwords using a combination of random characters, symbols and/or long phrases. Passwords longer than 8 characters are the best (the longer the stronger).
- To ensure a safe and secure online experience, switch up your passwords every three months. Don’t even think about using the same password multiple times or reusing an older one. For each website or service you use, come up with a distinctive new password that will keep you covered!
- Keep an eye on where you’re typing your passwords. Ensure that the traffic is always secure by verifying if the website has an SSL Certificate in its URL address. Phishing attacks are still prevalent. With almost 1.5 million fake sites created monthly to steal or compromise vital information from unsuspecting victims– don’t let yourself be taken for a ride!
- Utilize two-factor authentication to add an extra layer of security to your accounts. If a hacker manages to get hold of your password, they will be required to confirm the username through SMS or email. This enables you to detect any suspicious behavior immediately and take appropriate action.
- Under no circumstances should you jot down your passwords, especially for banking and social media. To help with the difficulty of memorizing them, opt for password manager services such as Lastpass, NordPass, Keeper Security – all highly recommended by security experts!
- Use a VPN when on public WiFi, to reduce risk of having your data intercepted.
- Use an antivirus software that can scan your system for malware and prevent attacks, including those that lead to compromised passwords and accounts being hacked.
Get help with a password manager
I can personally attest to the benefits of a password manager. With literally hundreds of passwords spanning home, family and business, a password manager has helped me to organise my passwords, “remember” passwords, generate strong passwords and identify weak ones.
Here are some statistics about Password Managers (Keeper Security)
- Most people do not use a password manager (71%) because they are under the false impression that they are not secure.
- Managing and storing online accounts passwords is a major task, yet only 20% of people take advantage of password managers to do so. LastPass dominates this market share, followed by Keeper Security and McAfee True.
- The majority (71%) of those using a password manager do so because they cannot remember their passwords
- Password managers encrypt the passwords and other data stored in them, significantly enhancing security. That’s the reason why 34% of password manger users use them. Encryption offers an additional layer of security.
- Password managers typically require a strong master password to access login credentials. login. Despite the fact that 81% of people create unique master passwords, an alarming 19% of individuals still recycle them.
- It’s no surprise that people leverage the convenience of mobile devices and laptop/desktop computers to access their password manager apps. As such, 77% of users sync passwords on multiple devices using a password manager, with 75% utilizing laptops or desktops.
Using a password manager is one of the best ways to ensure online security and protect your personal data. Password managers generate complex, secure passwords for all of your accounts, and store them in a safe virtual vault. They also encrypt your all your passwords with sophisticated algorithms, making it impossible for anyone to access them without the correct authentication. They help you avoid password reuse, and are also available across your PCs, laptops and mobile devices.
Password managers can also store other types of confidential data such as credit details and addresses. Some will also provide secure files storage and other features such as dark web monitoring, where the service monitors the dark web for data breaches that include your stolen credentials and .
Password managers are a great asset for any individual looking for comprehensive online security and peace of mind. So be sure to take advantage of one today! There are free ones, offline ones and paid ones with the bells and whistles.
The Final Score: What to do about scary password statistics in 2023
In just a few years, the average person has accumulated over 200 online accounts. That’s a lot of passwords to remember! Maybe that’s why 1 in 4 people use the same password for all their accounts. Or perhaps why “123456” and “password” are still the most common passwords. But with the majority of data breaches taking place due to weak passwords, you should take password security seriously. It may cost you dearly otherwise. There are some simple steps you can take. These include:
- Avoid using obvious words or personal information in your passwords.
- Update your passwords regularly.
- Don’t reuse passwords across your accounts
- Use common sense and watch out for phishing scams. (If you’re ever unsure about a website or email, don’t enter your password.)
- Create secure passwords that are unique, more than eight characters long and combine lower and upper case letters, numbers and symbols.
These simple steps can go a long way in keeping your accounts safe from hackers.
But if you want to take password security to another level, consider investing in a dedicated Password Manager. With a password manager, you only have to remember one master password – the password manager takes care of the rest. Plus, many password managers can generate strong passwords for you and even fill in login forms automatically. So there’s no excuse not to use one! Password management is just one aspect of securing your online footprint. Adding a VPN and having a backup plan and antivirus software, maybe even secure email service, can all enhance your online security.
Be smart and stay safe!