Studies Show The Most Hacked Passwords In 2025

Cybersecurity: Password Safety and Vulnerabilities

Recent analyses reveal ongoing issues with password security, highlighting significant vulnerabilities that remain prevalent among users. Despite increased awareness efforts, many individuals continue to use easily guessable passwords.

Research indicates that nearly 25% of commonly used passwords in the UK consist solely of numbers, with 49% comprising only letters. Frequently used patterns such as "qwerty" and simple words remain popular, facilitating unauthorized access. The password "123456" is particularly noteworthy, having appeared in over 132 million data breaches.

The investigation into password weaknesses identifies "123456," "123456789," and "admin" as some of the most insecure options. These passwords are frequently found in leaked databases and are easily compromised. Even slight variations using capital letters or symbols, such as "P@ssw0rd," can be quickly cracked.

Passwords consisting solely of numbers account for nearly 25% of the top 200 passwords in the UK, with each being compromised more than 8 million times on average. Approximately 14% of these passwords use common names, which are often easily guessed based on publicly available information.

Special characters are underutilized, appearing in only 3.7% of the top 200 passwords. Among these, only a few passwords, such as "G_czechout," are moderately secure, requiring approximately 4 hours for a computer to breach.

Recommendations for Enhancing Security

Security experts recommend using unique passwords for each account and storing them securely via password managers. The National Cyber Security Centre suggests creating passwords using three random words and enabling two-factor authentication to enhance security measures.

The Global Cybersecurity Outlook 2025 report by the World Economic Forum notes a significant increase in online attacks, doubling over four years. Stolen login credentials are a primary vector for unauthorized access, with attackers employing AI to accelerate and obscure their activities.

Certain threat groups exploit impersonation tactics to access internal systems of major organizations. Given these risks, cybersecurity is increasingly recognized as an essential skill for maintaining system integrity.

Governments are implementing stricter online security regulations. The UK is planning to prohibit ransomware payments in the public sector, and the European Union is enforcing new digital safety laws to deter cybercriminal activity.

Large corporations are also investing in enhanced cybersecurity measures. For instance, OpenAI has entered a substantial contract with the US Department of Defense to bolster cyber defenses using AI technologies. Microsoft is extending complimentary cybersecurity services to European governments in response to rising online threats.

However, smaller enterprises remain particularly vulnerable, with a notable percentage lacking adequate cybersecurity infrastructure.

Based on reporting by techround.co.uk.