Statistics from 10,000 leaked Hotmail passwords

An anonymous user posted usernames and passwords for over 10,000 Windows Live Hotmail accounts to web site PasteBin.
PasteBin is currently down for maintenance but I managed to get a copy of the list and quickly generated some statistics from these passwords.
First, my impression is that these passwords have been gathered using phishing kits.
Even more, I think it was a badly designed phishing kit, one that didn't further authenticated the users to the Hotmail/Live website.
I think it just returned an error message after grabbing the credentials.
I'm saying that because some of the passwords are repeated once or twice (sometimes with different capitalization).
The users didn't understand what happened and entered the same password again and again trying to login.
Bellow are the statistics:
The list initially contained 10028 entries.
After I've cleaned up the list, removing entries without a password, I've remained with 9843 entries (passwords).
There are 8931 (90%) unique passwords in the list.

An anonymous user posted usernames and passwords of over 10,000 Windows Live Hotmail accounts to a web site called PasteBin. PasteBin is currently down for maintenance but I managed to get a copy of the list, and quickly generated some statistics from these passwords.

My impression is that these passwords have been gathered using phishing kits.  Even more, the phishing kit used most probably was badly designed, since it was one that didn't further authenticated the users to the Hotmail/Live website. I think it just returned an error message after grabbing the credentials.  I noticed this because some of the passwords are repeated once or twice (sometimes with different capitalization).  What most probably happened, is that the users didn't understand what was happening, and they tried to enter the same password again and again, thinking the password was wrong.

Below are the statistics:

  • The list initially contained 10,028 entries.
  • After I've cleaned up the list, like removing entries without a password,  I had 9843 valid entries (passwords).
  • There are 8931 (90%) unique passwords in the list.
  • The longest password was 30 chars long: lafaroleratropezoooooooooooooo.
  • The shortest password was 1 char long : )

Top 20 most common passwords:

  1. 123456 - 64
  2. 123456789 - 18
  3. alejandra - 11
  4. 111111 - 10
  5. alberto - 9
  6. tequiero - 9
  7. alejandro - 9
  8. 12345678 - 9
  9. 1234567 - 8
  10. estrella - 7
  11. iloveyou  - 7
  12. daniel  - 7
  13. 000000  - 7
  14. roberto  - 7
  15. 654321  - 6
  16. bonita  - 6
  17. sebastian  - 6
  18. beatriz  - 6
  19. mariposa  - 5
  20. america  - 5

Based on these passwords I think the phishing kit was targeted towards the Latino community.

Password length distribution:

  • 1 chars - 2 - 0 %
  • 2 chars - 4 - 0 %
  • 3 chars - 4 - 0 %
  • 4 chars - 31 - 0 %
  • 5 chars - 49 - 1 %
  • 6 chars - 1946 - 22 %
  • 7 chars - 1254 - 14 %
  • 8 chars - 1838 - 21 %
  • 9 chars - 1091 - 12 %
  • 10 chars - 772 - 9 %
  • 11 chars - 527 - 6 %
  • 12 chars - 431 - 5 %
  • 13 chars - 290 - 3 %
  • 14 chars - 219 - 2 %
  • 15 chars - 157 - 2 %
  • 16 chars - 190 - 2 %
  • 17 chars - 56 - 1 %
  • 18 chars - 17 - 0 %
  • 19 chars - 7 - 0 %
  • 20 chars - 14 - 0 %
  • 21 chars - 10 - 0 %
  • 22 chars - 8 - 0 %
  • 23 chars - 3 - 0 %
  • 24 chars - 3 - 0 %
  • 25 chars - 3 - 0 %
  • 26 chars - 0 - 0 %
  • 27 chars - 3 - 0 %
  • 28 chars - 0 - 0 %
  • 29 chars - 1 - 0 %
  • 30 chars - 1 - 0 %

As you can see from the list above, most of the passwords are between 6 and 9 characters long.  Average password length is 8 characters.

What kind of passwords were in the list? :

  • 3,713 = 42 %; lower alpha passwords : passwords containing only characters from 'a' to 'z'.
    Example : iloveyou
  • 291 = 3 %; mixed case alpha passwords : passwords containing  characters from 'a' to 'z' and from 'A' to 'Z'.
    Example: ILoveYou
  • 1707 = 19 %; numeric passwords: passwords containing only numbers ('0' to '9')
    Example: 123456
  • 2655 = 30 %; mixed alpha and numeric passwords: passwords containing characters from 'a'-'z', 'A'-'Z' and '0'-'9'.
    Example: Iloveyou12
  • 565 = 6 %; mixed alpha + numeric + other characters.
    Example: 1Love You$%@

As we can see and conclude from the list above, a big majority of users still use very poor passwords: 42 % (lower alpha only) and 19 % (numeric only), while only 6 % from all the passwords had passwords which use a selection of alpha numeric and other characters.

ShareShare on FacebookTweet about this on TwitterShare on Google+

Leave a Reply


*

  1. Pingback: Thousands of Hotmail passwords leaked online | Shakeel Tariq's Blog

  2. Pingback: Most Common Hotmail Password Revealed! | Left to chance

  3. Pingback: Weak passwords dominate statistics for Hotmail's phishing scheme leak | Zero Day | ZDNet.com

  4. Pingback: Hotmail “Hacking” Mini-HOWTO: 123456 eingeben « AX11s Blinkenblog

  5. Tony G

    Amazingly, American Express still limits its online account users to maximum 8 (yes–EIGHT!) purely alphanumeric passwords; even dashes and underrscores are verboten. I complained to their online tech support reps a few times directly, but to no avail. They should be scolded publicly for these unbelievably stupid and dangerous limitations.

    –Tony G

    October 7, 2009 at 2:39 am Reply
  6. wells fargo does the same thing but they found a way to take it one step further. Both user names and passwords are NOT case sensitive.

    October 7, 2009 at 7:45 am Reply
  7. “As we can see and conclude from the list above, a big majority of internet users still use very poor passwords: 42 % (lower alpha only) and 19 % (numeric only), while only 6 % from all the passwords had passwords which use a selection of alpha numeric and other characters.”

    It’s not really valid to say that “a big majority of internet users” when the “study” is of users whose accounts have fallen to some hacking attempt. Users who are knowledgeable about password security would be less likely to give information to a phishing attack.

    October 7, 2009 at 10:13 am Reply
  8. @Benjamin Manns : You are right, thanks for noticing. It’s my mistake. I wanted to say “a big majority of users” (referring to these Hotmail users) not “a big majority of internet users”. I’ve corrected the post. Thanks again.

    October 7, 2009 at 11:52 am Reply
  9. Pingback: Analysis of 10k hotmail passwords - Remote Exploit Forums

  10. Pingback: 10,000 Hotmail, MSN and Live.com passwords exposed online « UbuntuGIDE.wordpress.com

  11. Hi Dmitry. Unfortunately, I don’t understand russian. I’ve tried Google translate but the results are not very good and it cannot translate images :)

    October 7, 2009 at 4:40 pm Reply
  12. Pingback: Nixu Web Journal » Valitsenpa kuusimerkkisen salasanan kun palvelu kerran sen hyväksyy

  13. Pingback: Acunetix Web Application Security Blog » Statistics from 10000 … | Webmaster Tools

  14. Tiago Jeronimo

    Hi Bogdan,

    Congrats for your study. Very clean and very useful.

    Could you please provide the list you have used for that study. Is there any place where we can find it?

    Thank you very much.

    October 7, 2009 at 6:29 pm Reply
  15. I found the list via Twitter. It was deleted since then. However, I’m sure you can still find it somewhere if you look closely enough.

    October 7, 2009 at 6:35 pm Reply
  16. Pingback: TechBlog

  17. Pingback: Phishing For Passwords easy as 1,2,3. « Digital Dilemmas

  18. Why does people use so simple passwords? The best trick is to use the same cryptical password, but with another letter at the beginning etc.! Easy to remember and never the same.

    October 7, 2009 at 8:20 pm Reply
  19. Pingback: Stolen Hotmail input reveals widespread use of weak passwords | Fortysixty’s Gadget Blog

  20. Pingback: TA-InfoTech » Blog Archive » Hacking, Strong Passwords and Phishing Scams

  21. Pingback: Stolen Hotmail goods reveals widespread use of weak passwords | Gadgets 411

  22. Fran

    tequiero is iloveyou in spanish
    tequiero – 9
    iloveyou – 7

    October 7, 2009 at 8:59 pm Reply
  23. Pingback: Maioria das senhas roubadas do Hotmail são simples | New Info

  24. Pingback: CNN Newsroom: Blog Archive - Email Passwords Stolen « - Blogs from CNN.com

  25. Pingback: Weak passwords dominate statistics for Hotmail’s phishing scheme leak « The Daily Blahg

  26. Pingback: Scam Compromises Email Accounts | The New New Internet

  27. Pingback: Análisis estadístico de las 10.000 contraseñas filtradas de Hotmail | Bitelia

  28. Pingback: Email attack spreads, dozy password protection won’t help | BitterWallet

  29. Pingback: K. Brian Kelley - Databases, Infrastructure, and Security

  30. Pingback: Maioria das senhas roubadas do Hotmail são simples « Windows System

  31. Pingback: china wholesale, china eletronics wholesale, china cctv wholesale and dropship in china . « Products & Tech News

  32. Pingback: Hotmail: 10.000 cuentas comprometidas por phishing tradicional » Sergio Hernando

  33. Pingback: Hotmail Scam Reveals Most Common Password: 123456 « SamsungDataCables

  34. Pingback: Fake entries in new e-mail/password lists point to unsophisticated phishing

  35. Pingback: The Insecurity of Password Security « m.laman

  36. Pingback: Web News and Practical websites » Hotmail leak: Most popular password? 12345

  37. Pingback: El Password más popular en Hotmail | arturogoga

  38. kftgr

    The data is unreliable, as these are assumed to be from a phishing scam. The best statistics you will get would only apply to the population of users that will fall for a phishing scam. Also, this is assuming the passwords are real (I sometimes spitefully enter false information into phishing scams). Personally, I’d like to know how different the statistics would be for people that did not fall for the same scam.

    October 8, 2009 at 6:34 am Reply
  39. Pingback: Today’s Favorite Stories

  40. Pingback: Contraseñas mas usadas en Hotmail « Gabriel Vegas

  41. Bob

    Are people with the name Alejandra or Alejandro predispositioned to come up with bad passwords?

    October 8, 2009 at 8:50 am Reply
  42. Pingback: Mail-Jacking « Rich’s Random Walks

  43. Pingback: ReputationDefender Blog : Five Tips for a Powerful Password

  44. Pingback: Stolen Hotmail data reveals widespread use of weak passwords | GeekoPedia

  45. Pingback: Tips para crear contraseñas un poco más seguras | Materia Geek

  46. Pingback: L’analisi parla chiaro, gli account di posta violati erano tutti protetti da password inadeguate. | TuttoVolume

  47. Pingback: Fake entries in new e-mail/password lists point to unsophisticated phishing | CHARGED's Digital Lifestyle at Work or Play

  48. Pingback: La contraseña más común en Hotmail es… 123456 | Shadow Security

  49. Pingback: Estadísticas de contraseñas filtradas de Hotmail

  50. anatomi

    I cannot remember what I cannot remember. Cyber society built on this sort of password-system is a sand castle. One solution could be expanding the password sysytem to include graphis and photos in addition to characters so that uses will be able to select what they are good at from among them. One such solution named Mnemonic Guard is becoming well known in Japan.

    October 8, 2009 at 2:57 pm Reply
  51. Hotmail user with account starting with b

    Couldn’t someone to tell Microsoft to send a mail to compromised accounts or instead put a site on the web where to ask if your password has been compromised?

    It seem incredible asking all people in hotmail to reset their password for a 10.000 leak.

    NOTE: Maybe, if you had the names of the accounts, you could be so kind to put a web form to ask if for my account.

    Many Thanks ;-)

    October 8, 2009 at 3:30 pm Reply
  52. Your account is not on the list :) But it’s a good security practice to change all your important passwords regularly. It depends on you how regularly.

    October 8, 2009 at 3:34 pm Reply
  53. Hotmail user with account starting with b

    Thank you very much, Mr. Bogdan :)

    October 8, 2009 at 3:37 pm Reply
  54. Pingback: Los usuarios de Hotmail poco originales con sus contraseñas

  55. Pingback: Leaked Hotmail Data Shows Poor Choice Of Passwords

  56. Pogo

    I’ve noticed a major flaw if you login via MSN Messenger. It ISN’T case sensitive!

    ie. if you use a upper and lower case alphas in your password, then it doesn’t matter if you type PaSSwoRD or password or PASSWORD.

    A huge oversight.

    October 8, 2009 at 4:29 pm Reply
  57. Pingback: “123456″, la contraseña más utilizada por los internautas | tuexperto.com

  58. Pingback: 123456 รหัสยอดฮิตของชาว Hotmail - Techblog

  59. Pingback: Incydenty » Trendy dot. jakości haseł dostępu na podstawie incydentu z Hotmail

  60. @Pogo: If what you are saying is true that’s very dangerous. I don’t use MSN to test it out.

    October 8, 2009 at 4:44 pm Reply
  61. Pingback: Noticia: La seguridad en las contraseñas de los servicios de Internet « Blog edt.diximedia.es

  62. Pingback: 123456, un mot de passe populaire sur Hotmail! | Descary.com

  63. ” 6 %; mixed alpha + numeric + other characters.” only 6% of good passwords? damm…

    October 8, 2009 at 6:55 pm Reply
  64. zealots run the world

    I can’t believe it :) My hotmail password is also 123456

    But here’s a catch, its a /dev/null email account I use to give to sites which refuse to serve me stuff without registering, so it’s a sink for their spam crap.

    I wouldn’t be so quick to judge us all idiots, not everyone wants or needs a high level security and different randomized complex passswords for every authenticatable piece of asset we have. Crappy hotmail account is definitely not one.

    October 8, 2009 at 7:51 pm Reply
  65. Pingback: 123456 es la contraseña más utilizada en Hotmail | Marketing en Internet

  66. Pingback: No utilices la contraseña 123456 para proteger tus cuentas de correos o servicios de internet | Experto en Internet

  67. Pingback: Listado con las contraseñas más utilizadas « Helektron.com

  68. Pingback: Senhas roubadas do Hotmail são analisadas

  69. Pingback: Bognár András (bognarandras) 's status on Thursday, 08-Oct-09 15:37:33 UTC - Identi.ca

  70. Pingback: Email phishing attack spreads to Gmail and Yahoo - Raymond.CC Forum

  71. Pingback: ATTENTION, vos mots de passe valent que dalle ! | Autour du Web

  72. Pingback: Leaked Hotmail Data Shows Poor Choice Of Passwords - Partytow

  73. Pingback: Baza de date cu parole Hotmail arata cat de slabe sunt acestea

  74. Pingback: Ciąg dalszy historii o wykradzionych hasłach | markasblog

  75. Pingback: 123456 « Datenschutzalltag

  76. Pingback: El password más común es… sí, 123456 : Blogografia

  77. Pingback: Les contrasenyes de Hotmail més usuals són molt poc segures « Tota La Vila

  78. Pingback: Five Tips for a Powerful Password : Michael Fertik - Internet entrepreneur and CEO of ReputationDefender

  79. Pingback: Phished or not, leaked passwords show lazy habits « R Web Security

  80. Pingback: El password más común es… sí, 123456 « Webeando en la red

  81. Pingback: El password más común es… sí, 123456 « RSS2Blogs

  82. valerie

    What’s worse is that some NY based national banks now only allow 4 digit PINs for ATMs. The teller asked if she could help with anything else- I complained about that and she told me to go online. Nice. Told her it was way less secure than the old 6 digit code.

    October 9, 2009 at 9:39 am Reply
  83. Pingback: Informacje » Blog Archive » Użytkownicy Hotmail używają prostych haseł

  84. Pingback: Leaked Hotmail Password Data Analysis

  85. Pingback: Hay más listas con claves de acceso a Gmail, Yahoo y AOL

  86. Pingback: Password deboli: uno studio sulla sicurezza delle password (rubate ad Hotmail) - Commenta la tecnologia, la telefonia, i software

  87. Pingback: » Password deboli: uno studio sulla sicurezza delle password (rubate ad Hotmail)

  88. Interesting post. Very nice and such a valuable information u shared with us. Thanks for it.

    October 9, 2009 at 6:41 pm Reply
  89. Pingback: Анализ 10000 украденных паролей Hotmail / Блог для блогеров. Блог о блогах, блогосфере, социальных сетях и гаджетах

  90. Pingback: El password más común es… sí, 123456 | UR-VE.COM

  91. Pingback: duritong's status on Friday, 09-Oct-09 13:50:08 UTC - Identi.ca

  92. Pingback: jekyll (jekyll) 's status on Friday, 09-Oct-09 15:13:35 UTC - Identi.ca

  93. Pingback: Phished or not, leaked passwords show lazy habits « Interesting finds

  94. Pingback: 如何選擇一個安全的密碼? « 1AM.HK – 科技資訊網

  95. Pingback: ‘123456′ es el password más utilizado, desgraciadamente » Cosas Que Contar – Una mirada joven de la actualidad tecnológica, científica, política y social

  96. Pingback: markbeadles.blogspot.com

  97. Pingback: La contraseña más usada es 123456 | GeekWe

  98. Pingback: El Password número 1 en Live Mail | +Vidatechno

  99. Pingback: Passord – igjen | Underverden

  100. Pingback: 123456 es la password favorita de los ilusos! - MadBoxpc.com

  101. Pingback: Hotmail Scam Reveals Most Common Password: 123456 | Everything's Social

  102. Pingback: تحليل كلمات السر المسربة لبريد الهوتميل | عالم التقنية

  103. Pingback: Das Warum-Blog » Was uns die Phishing-Attacken gegen Hotmail, Google und Yahoo zeigen

  104. Pingback: Phished or not, leaked passwords show lazy habits : BizzRoot

  105. Pingback: LordElph’s Ramblings » Pastebin.com and password lists

  106. Pingback: Mot de passe hotmail - Maison Ou Bureau

  107. Pingback: Auswertungen der 10′000 geleakten Hotmail-Passwörter « Kreativrauschen

  108. Pingback: Dogear-Nation – Episode 124 – Not Being Cool Enough | Dogear Nation

  109. Pingback: Kleine Kennwortstatistik … – Wissensmakler

  110. Pingback: Tausende von E-Mailkonten geknackt – Meine Erfahrungen im Umgang mit Zugangsdaten /// PC Blog Berlin über PC Probleme und andere Ärgernisse

  111. Pingback: Are Bad Passwords Really Less Secure? « InfoSec 2.0

  112. Pingback: blogg.umdac.umu.se - Vanligaste lösenorden på Hotmail « Incident Response Team (IRT) - Umeåniversitet

  113. Pingback: Passwörter: Simple Zahlenkombinationen beliebt :: eBusiness News

  114. Pingback: Δημοφιλή τα απλά (και ανασφαλή) passwords | Search Top Greek Blog

  115. Pingback: e-logick Actu – emploi ingénieurs, ecoles ingénieur, CV et pofils consultants experts developpeurs – statistiques emploi » Blog Archive » Fishing de Windows Live Mail : retour sur les faits

  116. Where can I view that list? Any one who can help?

    October 12, 2009 at 5:15 pm Reply
  117. Pingback: El password más común es… sí, 123456  | Zobit

  118. Pingback: Čemu služe lozinke? | Svakodnevnica blog

  119. Pingback: HOW TO: Protect Your Hotmail, Gmail, Yahoo Mail, Facebook from Hackers! | Thoughtpick Blog

  120. Pingback: Check if your email account has been exposed! « StormSecurity

  121. Pingback: La seguretat de les contrasenyes, tema pendent « Bloc de la Biblioteca de Matemàtiques

  122. Pingback: Το “123456″ ήταν το πιο κοινό Hotmail password | Search Top Greek Blog

  123. Pingback: Some passwords not to use for your email accounts (or any other) « QEEK Spot (Quantum Electronics Extreme Knowledge)

  124. Pingback: XTRO » La contraseña más común en Hotmail es… 123456

  125. Pingback: Ποιοι είναι οι πιο συνηθισμένοι κωδικοί για email;; | .:FoiTitaKoS.gR - Φοιτητικό Blog Ποικίλης Ύλης:.

  126. Pingback: 里面有你的密码吗? « 懂一点

  127. Pingback: Stay Safe by Learning from the Bad Passwords of Others | Business Hacks | BNET

  128. Pingback: La contraseñas más populares del mundo « infopista, el blog de José Femenías Cañuelo

  129. I also heard that 12345 is the most common password in whole world.. So if anyone is using this password is suggested to change their password…

    October 14, 2009 at 5:54 pm Reply
  130. Pingback: Password mais comum é 12345 « Dicas do Julio Jacovenko

  131. Pingback: 123456 is meest gebruikte paswoord | Internetvaardig

  132. Pingback: La contraseña más común en Hotmail es… 123456 | JorgeiSaac

  133. Pingback: Hotmail e Google Mail, perché le password sotto tiro - The New Blog Times

  134. Pingback: Gephishte Hotmail-Konten: “123456″ war das beliebteste Passwort | Basic Thinking Blog

  135. Pingback: My Hotmail account hacked - all my contacts spammed !! How to avoid it happening to you. at scatterdrum

  136. Pingback: Passwords – How Safe is Your Online Information? | PC User Clinic

  137. Pingback: » I Know Your Password My Privacy Tools Blog

  138. Pingback: Sören Martius » vernüftige Passwörter

  139. Pingback: Statistics from 10,000 leaked Hotmail passwords | eXPerience

  140. Pingback: Blog de PRISE » Blog Archive » Salvaguardando nuestras contraseñas

  141. Pingback: Revisa tu contraseña | EL PORTAL DE CHARI

  142. I think there are certain Passwords which are very common and are used by everywhere. So we should use the strong passwords.

    November 19, 2009 at 8:25 pm Reply
  143. Pingback: Lista de mas de 10 mil usuarios de hotmail.com | PanamaCOM

  144. Pingback: Galaxie TIC » Archives du Blog » Comment bien choisir ses mots de passe sur le net : un guide pratique

  145. Pingback: Infos zum Passwort Schutz | stockMagazin

  146. Pingback: Votre compte a été piraté? Comment trouver un excellent mot de passe « Le blogue de Kaven Brassard

  147. Pingback: Maioria das senhas roubadas do Hotmail são simples - WinBrasil

  148. Pingback: Prime analisi sull’attacco subito da Hotmail tramite la tecnica del phishing | Internet

  149. Pingback: blog.rbach.net - Password Insecurity

  150. Pingback: Fokus på passord? « frankps på norsk

  151. Pingback: InfoSec Daily » Episode 72 – http://5z8.info/super-nsfw_qzg

  152. Ali

    My msn and facebook have been hacked for one week ago. And i cant find any way to solve it. Can someone please help me? i’m student and i need my email so much. If there is someone can help me then please email me. Thanks

    March 23, 2010 at 9:05 pm Reply
  153. Pingback: PC Blog » Blog Archive » Западные идиоты тоже любят пароль «123456»

  154. Pingback: T’as vu ton mot de passe ?

  155. Pingback: Business Lounge » Blog Archive » Passwort Sicherheit

  156. Pingback: Prime analisi sull’attacco subito da Hotmail tramite la tecnica del phishing | RisorseGeek

  157. Pingback: Passwörter: Simple Zahlenkombinationen beliebt | newsnetwork.at

  158. Pingback: The Case of the Stolen Laptop: How to Encrypt, and Why - Techland - TIME.com

  159. Randy

    12345? That’s the stupidest combination I’ve heard of in my life! That’s the kind of thing an idiot would have on his luggage!

    August 7, 2010 at 3:23 am Reply
  160. Pingback: Passwort-Check im Web: Wie sicher ist Ihr Passwort? ... ScareWare.de

  161. wow nice statistics….I am going to go change all my passwords to better ones right now…. you really have me thinking

    September 22, 2010 at 8:43 am Reply
  162. My msn and facebook have been hacked for one week ago. And i cant find any way to solve it.

    September 23, 2010 at 12:55 am Reply
  163. Pingback: Passwords and the Knowing-Doing Gap

  164. Pingback: Leaked hotmail password data analysis – internet marketers, single users

  165. Pingback: Password Security | CIO Whisperer

  166. Pankaj Saraf

    Hey this is really very good post. I liked it

    September 21, 2011 at 7:02 pm Reply
  167. joe doe

    the phishing kit used most probably was badly designed, since it was one that didn’t further authenticated the users to the Hotmail/Live website. I think it just returned an error message after grabbing the credentials.

    October 17, 2011 at 10:51 pm Reply
  168. Pingback: 500 Most Common Passwords | Negative Foo

  169. Many people who use hotmail, but I’m pretty selective to provide a password and security in the email that I use. In my opinion, it is important to do so that my email not collapse by the people who are not responsible.

    August 11, 2012 at 6:02 pm Reply
  170. Jason

    Can you make a graph and calculate the standard deviation? I’d appreciate it more in graph form.

    November 28, 2012 at 3:07 pm Reply
  171. Petr Bednarik

    Interesting post, this is the best password 123456 :-) And people wonder why somebody hacked their mailbox

    February 2, 2013 at 3:25 pm Reply
  172. Pingback: It is time to for passwords to grow up. | From Atop The Wall