Rarely a day goes by when another high-profile provider is compromised due to weak or insecure passwords. To date over 1.2 Billion account passwords have been leaked to the internet for use by hackers and script-kiddies. The saddest thing is that the vast majority of these passwords consist of, or contain, the same 500 phrases. As such, our system blocks the use of any kind of variation of these passwords. New passwords must not contain or consist of a variation of the following 500 most commonly used passwords:

So, for example, using the password of “Pa$$w0rd”, “P@ssword”, or “p455word” would neither be advisable or allowed, as these are all a variation of the 101st most commonly used password. Likewise the password of “TimeLord” would not be advisable or allowed either as this contains the 495th most commonly used password “time”.

For a password to be truly effective it should neither contain a name or a word found in a dictionary (in any language). It should be a randomly chosen series of letters (of Mixed Case), numbers, and symbols. For help with choosing a secure password see https://news.scarabmedia.com/help-center/guide-to-creating-strong-passwords. It is important, both to protect yourself, as well as to protect the integrity of the Hosting Services you share, to use strong and secure passwords.

A series of more comprehensive lists of commonly used passwords can be found at https://github.com/danielmiessler/SecLists/tree/master/Passwords

Posted in: Passwords