Why? Because they're idiot easy to break, and they're at least partly responsible for the fallout all over the rest of the Web from the Gawker break-in and account info leak a few weeks ago.
Source: The top 50 passwords you should never use - Graham Cluley, Naked Security, Sophos Labs, 2010-12-15.
I took the liberty of adding some commentary on certain passwords.
Truthfully, these are passwords that shouldn't have been used even before the Gawker break-in, let alone after.
- 123456
- password
- 12345678
- lifehack
- Believe it or not, this was a password used on Life Hack, one of the Gawker sites compromised. Hang your head in shame.
- qwerty
- abc123
- 111111
- monkey
- consumer
- 12345
- The Spaceballs luggage combination wasn't #1 but was in the top 10?? Color me shocked!
- 0
- letmein
- Oh, the attacker got let in, all right.
- trustno1
- dragon
- 1234567
- baseball
- superman
- iloveyou
- gizmodo
- sunshine
- 1234
- There we have every combination of serial numbers 4-7. Pure genius.
- princess
- starwars
- whatever
- shadow
- cheese
- 123123
- nintendo
- football
- computer
- fuckyou
- You'd be surprised at the number of people who choose profane passwords. They're certainly surprised when IT cracks them and it shows up in the list of weak passwords given to their bosses. They're also surprised when they have to update their resumes after such an embarrassing disclosure.
- Profanity does not add to password complexity at all. Yet another reason not to use it.
- 654321
- blahblah
- passw0rd
- This trick is not clever. It's old hat now, and the technique is as easily broken as pure dictionary words.
- master
- soccer
- michael
- 666666
- jennifer
- gawker
- Password
- Capitalization used to help, but computers and network connections are fast enough now that it's as weak as all-lowercase dictionary words, for all intents and purposes.
- jordan
- pokemon
- Hackers catch 'em all~
- michelle
- killer
- pepper
- welcome
- Those who broke in certainly were.
- batman
- kotaku
- internet


