Stop using your name as your online password, George

You too, Charlotte.
Stop using your name as your online password, George

The Georges of the world need to stop using their names for their online passwords

In honor of World Password Day this week, cybersecurity firm ID Agent analyzed password data it collected from sites not accessible through your everyday web browser, otherwise known as the dark web.

The company looked through 2 billion passwords being shared on these illicit areas of the internet, according to an email from an ID Agent spokesperson, and it found some interesting commonalities among the login credentials that were stolen.

Among the list of offenders, using your first name as a password is perhaps the most easily crackable choice. Even if you use it for an anonymous account, one small slip on your end and a hacker could trace that account to one that does use your name, like a public social media profile.

Apparently, people named “George” do this a lot as it was the most common first name found in this password data. Other common first names used as passwords include Michael, Hunter, Charlotte, and Matthew.

Public online profiles can give away a lot more than your real name. For example, if you live in Dallas, Texas please don’t use “Dallas” as your password. It’s the most common city name found among this trove of stolen login credentials.

Did you post some photos on Facebook after seeing your favorite band last year? Are you arguing about your favorite sports team on Twitter? If so, you might be handing over a trove of information to hackers concerning what your password may possibly be.

Sports team names are a popular choice for people opting for a weak password. If you’re a baseball fan from New York, perhaps your password is “Yankees,” which is the most common team name used for a password. Steelers, Eagles, and Red Sox also top that list. Interestingly, what's even more popular than those team names, however, was the password “rolltide,” a reference to the University of Alabama's rallying cry for its college football team, the Crimson Tide.

Cartoon characters and comic book superheroes are also a common pick for users who say, “Please hackers, steal my info.” Of those, Tigger, Snoopy, Mickey, Superman, and Batman are the most commonly used.

“Jenny, I’ve got your number” ... and now your password if you’re one of the many people using “8675309” — the title of the classic song by Johnny Tutone.

Blink 182, Rush, The Beatles, and Blondie are other common band names that are also used far too often as people’s passwords.

During this pandemic, cybersecurity professionals have found a number of different attacks being deployed by bad actors looking to take advantage of the situation and steal your info. So it's worth taking the time to reevaluate your current password choices. Are you using uppercase and lowercase characters in your password? How about numbers and other special characters? Is your password too short? Are you using two-factor authentication where applicable?

Now, excuse me while I go change a few of my passwords.

Topics Cybersecurity

Mashable Potato

Recommended For You

Instagram denies data breach: So what's up with those sketchy change password emails?
instagram logo against a black background

How to tell if an Instagram password reset email is real
close-up view of Instagram app in the App Store

OpenAI must stop using ‘Cameo’ term in Sora app, judge rules
Sora and OpenAI logo


Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone

What's new to streaming this week? (April 3, 2026)
A composite of images from film and TV streaming this week.


Google launches Gemma 4, a new open-source model: How to try it
Google Gemma
The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!