Analyst Robert Graham of Dark Reading, a website dealing with computer security issues, authored a fascinating report on the recent hacking of the popular website phpbb.com. The hacker published approximately 20,000 passwords from the site. A few of the interesting insights about the passwords:
16% of passwords matched a person’s first name. This includes people choosing their own first names or those of their spouses or children. The most popular first names were Joshua, Thomas, Michael, and Charlie. But I wonder if there is something else going on. Joshua, for example, was also the password to the computer in “Wargames,” which almost certainly accounts for it being at top. Variations of the name “Jordan” are popular, which almost certainly refers to “Michael Jordan,” a prominent basketball start (such as “jordan23,” referring to his jersey number). This makes me wonder how many people use “Michael” as a password to refer to their children compared to sports stars.
14% of passwords were patterns on the keyboard, like “1234,” “qwerty,” or “asdf.” There are a lot of different patterns people choose, like “1qaz2wsx” or “1q2w3e.” I spent a while googling “159357,” trying to figure out how to categorize it, then realized it was a pattern on the numeric keypad. I suppose whereas “1234” is popular among righthanded people, “159357” will be popular among lefties.
4% are variations of the word “password,” such as “passw0rd,” “password1,” or “passwd.” I googled “drowssap,” trying to figure out how to categorize it, until I realized it was “password” spelled backward.