Analytics firm: 2% of global IT administrator accounts use "admin" as their password, followed by "123456"

CTOnews.com, October 18, the security company Outpost24 released a survey data earlier today. It is said that it has analyzed 1.8 million leaked accounts on the market, and believes that at least 2% of the IT administrator accounts in the world directly use "admin" as the password. At present, Outpost24 has officially analyzed the relevant research details.

It is reported that Outpost24 analyzed the company's Threat Compass database, which contains a large number of leaked account passwords. Security companies screened out 1.8 million accounts marked "Administrator Portal (Admin portals)" and found that more than 40,000 related account passwords were admin, and the top five passwords most frequently appeared in the account were:

Admin

123456

12345678

1234

Password

Outpost24 believes that many IT administrators are rather "lazy" and directly adopt the default passwords of network devices, because "these passwords are common default passwords in network devices, whether they are admin, Password, or 12345."

Outpost24 stressed that using "default passwords" is extremely vulnerable to hackers, but in spite of this, many lazy IT practitioners still use these passwords widely.

CTOnews.com also found that password management app NordPass had previously analyzed 3TB's leaked password database, showing that the top five most common passwords in 2022 were password, 123456, 123456789, guest and qwerty.

In fact, in recent years, relevant legislation has been put in place overseas to prohibit the use of preset passwords, such as the "Product Security and Telecommunication Infrastructure" (PSTII) Act of the United Kingdom and the "Senate Bill 327" password Act of California. These laws require that every device connected to the Internet must have a "unique password" to prevent the relevant practitioners from being "lazy" and causing the device to be hacked, thus causing serious network accidents.