Overview
- During Thursday’s World Password Day, researchers and vendors reported that weak and reused logins still dominate and remain a leading cause of account takeovers.
- Security firms say AI and automation now power faster phishing and fraud, and Check Point reports Telegram bots that sell stolen access in seconds, with hacked social accounts priced around $45 and verified bank logins topping $1,000.
- Kaspersky’s review of 231 million leaked passwords found 68% of common passwords can be cracked in under a day, and more than 20% of 15‑character passwords fall in under a minute when people use predictable patterns.
- The biggest weakness is behavior: studies cite 94% of people reusing passwords, and LayerX found 45% of employees use AI tools and 77% paste sensitive data into chatbots; Spain’s INCIBE says over 90% of incidents start with compromised credentials.
- Platforms are expanding passwordless sign‑ins using passkeys, which confirm identity on your device with biometrics or a device PIN instead of sending a reusable password, and experts urge enabling two‑factor checks and using certified password managers to keep unique logins for every account.