An investigation into the state of passwords

Attacks on passwords are on the rise so what exactly makes them specifically vulnerable? This white paper from Specops Software looks into both the human side and the tech side of why passwords can be seen as the weakest link in an organisation’s network.

From real world attack data to passwords inspired by pop culture, Specops’ 2022 Weak Password Report explores just how vulnerable passwords truly are.

The research in this report has been compiled through proprietary surveys and data analysis of 800 million breached passwords, a subset of the more than 2 billion breached passwords within Specops Breached Password Protection list.

Highlights include data which reveals that 54% of organisations do not have a tool to manage work passwords, 93% of the passwords used in brute force attacks include 8 or more characters and 48% of organisations do not have user verification in place for calls to the IT service desk.