More than 24 billion usernames/passwords are available on the dark web
An increase of 65% in just two years
LONDON — Digital Shadows published research quantifying the scale of password compromise globally. The study finds there are more than 24 billion usernames and password combinations in circulation in cybercriminal marketplaces, many on the dark web — the equivalent of nearly four for every person on the planet. This number represents a 65% increase from a previous report in 2020.
Consumers continue to use easy-to-guess passwords despite the increase in cybercrime. Digital Shadows found that the top 50 most common passwords are incredibly easy to guess and simply use the word “password” or a combination of easily remembered numbers. Some 0.46% of all passwords — nearly one in every 200 — is 123456. Keyboard combinations such as “qwerty” or “1q2w3e” are commonly used. Of the 50 most commonly used passwords, 49 can be cracked in under one second via easy-to-use tools commonly available on criminal forums, which are often free of charge or at minimal cost.