How safe are your online passwords? Timely reminders from ‘Password Day’

Password Day was marked on May 1, but the reminder it brings remains just as relevant today: Is your password really protecting you?

A 2024 report from password manager NordPass revealed that “123456” is still the most common password in the Philippines, followed closely by the ever-faithful “password.” Also in the local Top 5 are “123456789,” “qwerty123” and “12345.”

Cybersecurity experts say this isn’t just a harmless habit — it’s a red flag. These simple combinations can be cracked in seconds using automated tools, putting everything from email to banking and social media accounts at risk.

State of cybersecurity

In a 2024 report quoted by Philstar, Keeper Security chief executive officer Darren Guccione emphasized that weak and reused credentials remain the leading cause of data breaches. Passwords are still the first line of defense, protecting access to everything from apps to IT systems — yet only 25 percent of users practice strong password hygiene.

The other 75 percent? They’re still relying on weak, easy-to-guess passwords across multiple accounts — a practice that significantly raises their vulnerability to attacks.

How hackers crack passwords

According to NordPass, hackers use a range of methods:

- Brute-force attacks try every possible combination until they hit the right one.

- Dictionary attacks guess passwords using common words and phrases.

- Phishing tricks users into entering login details on fake websites.

- Credential stuffing reuses passwords leaked in previous breaches.

- Keyloggers track your keystrokes to steal login credentials silently.

What makes a strong password?

A strong password, NordPass advises, should be at least 12 to 15 characters long, and include a mix of uppercase and lowercase letters, numbers, symbols — and even spaces. It should also be unique to you — not something a hacker could easily guess from your social media profiles.

And the golden rule: never reuse passwords across different accounts. One compromised password could unlock your entire digital life.

Password Day may be over, but your online safety is a year-round commitment. S