World Password Day

World Password Day 2025: Let’s Be Honest, Passwords Are Tired

Happy World Password Day! 🎉

Or… maybe “happy” is a stretch. Because the truth is, passwords are still the #1 reason most people get hacked, and most of us still kinda stink at them.

We reuse them.

We forget them.

We store them in Notes apps like it’s totally fine.

We know better. We just haven’t gotten better. Yet. So let’s change that today.

🔑 The State of Passwords (Still Not Great)

Despite all the breaches and all the warnings, bad password habits are still alive and well.

According to a recent analysis by Cybernews, people are still using gems like:

• 123456

• qwerty

• 111111

• and yes… password

Some of these have been cracked millions of times—and people are still using them.

But there’s hope.

More people are finally adopting password managers.

Multi-factor authentication is becoming the norm (not the exception).

And best of all—passkeys are finally giving us a way out of this mess.

✅ What You Should Do Today

If you do nothing else this Password Day, do one of these:

• Switch to a password manager (Bitwarden, 1Password, iCloud—just pick one)

• Turn on MFA for your most important accounts

• Delete any saved passwords hiding in your browser

• Set a calendar reminder to reset old, bad passwords, monthly.

• Try logging in with a passkey instead of a password

Need help with that last one?

Check out my blog on passkeys to see why they’re better in every way.

🔁 Want to Go Deeper?

Here are a few past Between the Hacks posts worth revisiting (or reading for the first time):

• 📝 World Password Day 2021 – A look back at bad habits and how to break them

• 🔐 Passwords Part 1 – Why password security still matters

• 🧠 Password Managers – How to pick one and why you should

• 🧬 Rainbow Tables – How your weak password can be cracked in seconds

• ✅ Why MFA Isn’t Optional Anymore – Seriously, just turn it on

• 🔑 Passkeys: The Future of Logins – The better, safer alternative to passwords

🔒 TLDR

Passwords are still around, but they don’t have to be painful.

Use a password manager.

Turn on MFA.

Try a passkey.

And please—retire iloveyou123 already.