Why are online accounts still being secured with a six-digit string?
07 May 2026
•
,
4 min. read
Did you know that the most commonly used password globally is ‘123456’? According to NordPass’s latest report on passwords exposed in data breaches, other predictable choices like ‘123456789’, ‘12345678’, ‘12345’, and ‘admin’ continue to be popular year after year.
World Password Day prompted me to test the security of mainstream websites. Surprisingly, sites like ‘evite’ still allow ‘123456’ as a password, despite a data breach in 2019 affecting over 100 million users. Even platforms like Facebook permit weak passwords such as ‘1234567!’.
While some sites like Collins Dictionary enforce stronger password policies, many platforms lack stringent authentication measures. This highlights the need for legislative action to ensure all companies implement robust password security practices.
Breaking the cycle
It’s time for lawmakers to step in and enforce strict authentication policies across all industries. Companies must prioritize cybersecurity measures like multi-factor authentication to protect user data effectively.
By mandating modern authentication methods and moving away from outdated password practices, we can enhance online security for all users. Let’s put an end to the discussion on weak passwords once and for all.
For secure password generation and more insights on online account security, visit ESET’s password generator page.
