One out of every 142 passwords is '123456'

In one of the biggest password re-use studies of its kind, an analysis of more than one billion leaked credentials has discovered that one out of every 142 passwords is the classic “123456” string.

The study, carried out last month by computer engineering student Ata Hakçıl, analyzed username and password combinations that leaked online after data breaches at various companies.

These “data dumps” have been around for more than half a decade, and have been piling up as new companies are getting hacked.

The data dumps are easily available online, on sites like GitHub or GitLab, or freely distributed via hacking forums and file-sharing portals.

Over the years, tech companies have been collecting these data dumps. For example, Google, Microsoft, and Apple, have collected leaked credentials to create in-house alert systems that warn users when they’re utilizing a “weak” or “common” password.

Furthermore, the Have I Been Pwned online service also works on top of these leaked data dumps and credentials.