We're all still making the same mistakes when it comes to secure passwords

passwords
(Image credit: italii Vodolazskyi / Shutterstock)

As the number of accounts needed for all of the online services we use every day has skyrocketed in recent years, password reuse continues to remain a huge problem for both consumers and businesses according to a new report from SpyCloud.

The cybersecurity firm's new 2022 Annual Identity Exposure Report sheds light on how users still continue to reuse passwords across multiple online accounts as opposed to using a password generator or even a password manager to create strong, unique passwords for each of the online services they use.

Over the course of last year, SpyCloud says it recaptured over 15bn credentials and personally identifiable information (PII) from cybercriminals which is a 200 percent increase from the assets it recaptured in 2020. With this information in hand, cybercriminals can commit identity theft and other types of fraud that impact both businesses and consumers alike.

To make matters worse, many of the credentials recovered by SpyCloud had previously been exposed in past data breaches and leaks.

Bad passwords

Despite an increase in knowledge about password hygiene, users continue to pick bad passwords that are incredibly easy to guess such as “123456”, “qwerty”, “admin” and “password”. SpyCloud also found that more people are basing their passwords off of content from streaming services like Netflix and Disney+ with Loki, Falcon and Wanda being the top pop-culture-themed reused passwords.

Of the passwords it recovered from publicly available data breaches and leaks in 2021 and from previous years, 64 percent are still being used across multiple accounts. SpyCloud also found that 70 percent of users whose credentials were part of a data breach or leak are still reusing the same exposed passwords.

Even if you don't want to upgrade to premium password manager, these days you can use a browser like Google Chrome to create new, strong passwords for you and store them securely. With your credentials stored in Chrome, you can access and use them to log in to your online accounts on other devices such as your Android smartphone.

As the number of online accounts required in our digital lives doesn't seem to be decreasing anytime soon, the responsibility of creating, remembering and securely storing all of your unique passwords falls on users themselves especially if they don't want to fall victim to identity theft or fraud.

Via ZDNet

Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Read more
password manager
I'm a security expert - here are my biggest tips for creating a secure password for work and home life to stay safe online
Cartoon Phishing
Over a billion credentials stolen were stolen in malware attacks in 2024
Young woman working at a coffee shop with a laptop
Too many passwords, not enough brain space? Here’s how password managers can improve your life
A digital representation of a lock
Gen Z and Millennial social media accounts are ripe for the taking and this doesn’t surprise me
Man screaming at computer with TechRadar data privacy week logo next to it.
I almost lost my entire online identity – until one tool made all the difference
A hand laying out a password
Security attacks on password managers have soared
Latest in Security
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple H3C Magic routers hit by critical severity remote command injection, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand
Lock on Laptop Screen
Medusa ransomware is able to disable anti-malware tools, so be on your guard
Latest in News
An Apple Music pink/pixellated poster advertising DJ with Apple Music
DJ with Apple Music lands, allowing subscribers to build and mix DJ sets directly from its +100 million-song catalog
The Meta Quest 3 and controllers on their charging station which is itself on a wooden desk next to a lamp
Forget Android XR, I've got my eyes on Vivo's new Meta Quest 3 competitor as it could be the most important VR headset of 2025
Samsung Galaxy S25 from the front
The Now Bar on Samsung One UI 7 is about to get a lot more useful – and could soon match Live Activities on iOS
Marvel Rivals
Marvel Rivals will get two new hero skins for Moon Knight and Black Panther this week meaning I'll now need to farm even more Units
An iPhone running iOS 18 on a purple and blue background
iOS 18.4 could launch soon with a major upgrade to your iPhone’s notifications
Netflix Ads
Netflix adds HDR10+ support – great news for Samsung TV owners, but don't expect LG and Sony to do the same any time soon