Password Security remains a major concern as cyber threats continue to evolve. Kaspersky experts analyzed 231 million unique passwords found in major password leaks between 2023 and 2026. The study uncovered several patterns that make many passwords vulnerable to attacks.
The analysis revealed that 68.2% of passwords can be hacked within a day. Researchers also found that 60.2% of all analyzed passwords can be cracked in about one hour, regardless of their length.
Key Findings From the Password Security Research
Several common patterns appeared throughout the leaked passwords:
- 53% of passwords ended with numbers.
- 17% started with numbers.
- Nearly 12% contained date-like number sequences from 1950 to 2030.
- About 3% included keyboard patterns such as "qwerty" or "ytrewq".
- Many passwords used simple numeric sequences like "1234".
These predictable structures make Password Security weaker because attackers often test such combinations first.
Common Symbols Used in Passwords
Many online services require passwords with at least 10 characters. They also require one uppercase letter and either a number or a special symbol.
However, the research showed that following only these rules may not provide full protection against AI-powered attacks.
Among leaked passwords:
- The "@" symbol appeared in 10% of cases.
- The "." symbol appeared in 3% of passwords.
Because these symbols appear frequently, attackers often include them in password-cracking attempts.
Popular Words Reduce Password Security
Kaspersky experts also examined the words people use in passwords. The study found that positive words appeared more often than negative ones.
Frequently used words included:
- love
- magic
- friend
- team
- angel
- star
- eden
Other words such as "hell," "devil," "nightmare," and "scar" also appeared in leaked passwords.
According to Kaspersky Data Science Team Head Alexey Antonov, common symbols, dates, and numbers make attacks easier, especially when placed at the beginning or end of passwords.
How to Improve Password Security
Researchers recommend avoiding single-word passwords. Adding a number or symbol at the end does not make a password strong enough.
Better Password Security practices include:
- Use passwords with 16 or more characters.
- Avoid predictable dates and number patterns.
- Mix different character types throughout the password.
- Use less common character combinations.
- Store credentials with a password manager.
The study highlights an important lesson. The longer and less predictable a password becomes, the harder it is to crack. Effective Password Security depends on creating passwords that attackers cannot easily anticipate.