Most people use passwords between 8–10 characters in length, accounting for 42% of the analysed passwords. Eight characters was the most popular length.

Almost 20% of unique passwords mixed case letters and numbers but did not include special characters.

There has been an improvement in complexity over time: in 2022, only 1% of passwords used a mix of lowercase, uppercase, numbers, and symbols; this figure has now climbed to 19%.

Food is popular in passwords, with "tea" appearing in 36 million entries, "apple" in 10.7 million, "rice" in 4.9 million, "orange" in 3.6 million, "Pizza" in 3.3 million.

US States are popular in passwords, with "Carolina" appearing in 1.9 million entries, "Dakota" in 1.2 million, "Texas" in 1.1 million.

Seasons are popular in passwords, with "Summer" appearing in 3.8 million entries.

Among those who have used passkeys, 38% report enabling them whenever possible.

Among people familiar with passkeys, 53% believe passkeys offer greater security than passwords.

More than half of consumers believe passkeys are both more secure (53%) and more convenient (54%) than passwords.

47% of consumers will abandon purchases if they have forgotten their password for that particular account.

Among people familiar with passkeys, 54% consider them to be more convenient than passwords.

Over 35% of people had at least one of their accounts compromised due to password vulnerabilities in the last year.

More than two thirds of users familiar with passkeys turn to them for simpler, safer sign-ins.

69% of consumers have enabled passkeys on at least one of their accounts.

74% of consumers are aware of passkeys.

Passkey implementation has reached 48% of the world’s top 100 websites

With AI-grade hardware, password cracking speeds have surged by over 1.8 billion percent compared to consumer-grade machines. This acceleration using AI-grade hardware has collapsed cracking timelines from billions of years to just a few hours.

Compared to 2024, the time it takes to crack passwords using consumer-grade GPUs has dropped by nearly 20%.

Compared to 2024, the time it takes to crack passwords using consumer-grade GPUs has dropped by nearly 20%.

An eight-character password made up of only lowercase letters can now be cracked in just 3 weeks using consumer-grade GPUs.