BusinessToday Previous Editions

11 COMMERCIAL 2.12.2021 Most common passwords of 2021: what to do if yours makes the list IF you use "123456", "password" or "qw- erty" as a password, you're probably aware that you're leaving yourself vul- nerable to hackers. But you're also not alone – these are three of the top ten most common passwords around the world, according to a new report. In partnership with independent re- searchers, password management ser- vice NordPass complied millions of passwords into a dataset to determine the 200 most commonly used pass- words around the world in 2021. ey analysed the data and present- ed results across 50 countries, looking at how popular various choices were in different parts of the world. ey also looked at password trends by gender. e findings show password choices are often attached to cultural referenc- es. For example, people across several countries take inspiration from their fa- vourite football team. In the UK, "liver- pool" was the third most popular pass- word, with 224,160 hits, while the name of Chilean football club "colocolo" was used by 15,748 people in Chile, making it the fifth most common choice. In some countries passwords relating to religion were popular. For example, "christ" was the 19th most common password used in Nigeria, used 7,169 times. Meanwhile, "bismillah", an Ara- bic phrase meaning in the name of Al- lah, was used by 1,599 people in Saudi Arabia – the 30th most common choice. e report also reflected differences between genders. Women tend to use more positive and affectionate words and phrases such as "sunshine" or "il- oveyou", while men often use sports-re- lated passwords. In some countries, men use more swear words than wom- en. While music-themed passwords were popular across both genders, choices like "onedirection" or "justinbieber" were more popular among women, whereas men favoured bands such as "metallica" and "slipknot". Choose long and complex passwords Passwords remain the main authenti- cation mechanism for computers and network-based products and services. But we know people continue to choose weak passwords and often don't man- age them securely, leaving themselves vulnerable to online security threats. Weak passwords are easy to guess and can be cracked with minimal difficulty by attackers using brute-force methods (trying all letter, number and symbol combinations to find a match). ey are also easy targets for a dictionary attack, which is a systematic method attackers use to guess a password, trying many common words and variations of these. To overcome the security issues as- sociated with password-based authen- tication systems, researchers and de- velopers are now focused on creating authentication systems which don't rely on passwords at all. In the meantime, two-factor authenti- cation (2FA) or multi-factor authentica- tion (MFA) methods are a good way to secure your accounts. ese methods combine a password with biometrics information (for example, a face scan or fingerprint) or something you have, like a token. You can create a password that's both strong and memorable by combining three random words. Machine-generat- ed passwords are also difficult to guess and less likely to appear in password dictionaries used by attackers. But of course, all of this is easier said than done. One of the challenges we face in today's digital age is password overload. And it can be difficult to re- member complex passwords, particu- larly machine-generated ones. So it's a good idea to use a reliable pass- word manager for this purpose. Relying on your web browser to remember your passwords is less secure – it's possible attackers can exploit vulnerabilities in the browser to access stored passwords. NordPass' findings, although not pub- lished in a peer-reviewed journal, align with what we know from similar lists published elsewhere – that the most popular passwords are weak. Hopefully, if you see one of your pass- words on this list, it will be impetus to change it to something stronger. Ethical hackers – people who work to prevent computers and networks from being hacked – could also use these insights for good. On the other hand, we have to acknowledge the possibility that hack- ers could use this information to target password attacks. is should be all the more reason to strengthen your pass- words.

• Cover