Superhero Passwords Pose Serious Risk to Personal, Enterprise Accounts

guest · Oct 6, 2021

Superhero Passwords Pose Serious Risk to Personal, Enterprise Accounts
...they can’t keep online accounts secure in the digital era, Mozilla warns.
October 6, 2021
https://www.securityweek.com/superhero-passwords-pose-serious-risk-personal-enterprise-accounts

With hundreds of thousands of occurrences in breach datasets, superhero passwords aren’t a strong account protection method, even when the real identities of superheroes are used instead.

Data from breach notification website haveibeenpwned.com reveals that thousands of users choose to protect their online accounts with superhero names, thus weakening their protection.
Click to expand...

With more than 328,000 occurrences in breach datasets, Superman is the most commonly used superhero password, followed by Batman (more than 226,000 occurrences) and Spider-Man (slightly over 160,000 occurrences).
Wolverine, Ironman, Wonder Woman, and Daredevil are also popular, emerging tens of thousands of times in datasets.

The real identities of superheroes are also poor choices for passwords. James Howlett/Logan was seen more than 30,000 times in datasets and Clark Kent, Bruce Wayne, Peter Parker and Tony Stark had thousands of occurrences each as well.
Click to expand...

If such passwords are used within enterprise environments, they could expose the entire organization to attacks. In fact, even the compromise of a personal account may lead to the gathering of information that, when leveraged in phishing, could help a malicious actor breach an organization.
Click to expand...

Mozilla: Superhero passwords may be your kryptonite wherever you go online

In recognition of Cybersecurity Awareness month, we revisited our “Princesses make terrible passwords for Disney+ and every other account,” and took a look to see how fortified superhero passwords are in the fight against hackers and breaches. According to haveibeenpwned.com, take a look at the how many times these superhero passwords have showed up in breached datasets:
Click to expand...

Log in or Sign up

Superhero Passwords Pose Serious Risk to Personal, Enterprise Accounts

guest Guest

Log in or Sign up

Superhero Passwords Pose Serious Risk to Personal, Enterprise Accounts

guest Guest

Useful Searches