Password Reuse and Weak Credentials Remain Widespread, Huntress Statistics Show
Summary
Huntress compiles password-security statistics showing widespread reuse and weak credentials, alongside growing password-manager and passkey adoption. It recommends long, unique passwords, secure storage, MFA, and phishing awareness.
Key points
- Huntress reports that 37% of identity-based threats in its 2026 telemetry involved stolen or suspicious-footprint credential logins.
- Cybernews found 94% of more than 19 billion exposed passwords were reused or duplicated; only 6% were unique.
- Only 19% of analyzed leaked passwords combined uppercase and lowercase letters, numbers, and symbols.
- Password managers are used by 36% of US adults, while passkeys have reached 5 billion active worldwide, according to cited sources.
- The article recommends long, unique, unpredictable passwords, secure storage in a password manager, and MFA; it also advises caution with suspicious login links.
- It notes that infostealers appeared in 24% of cyber incidents in Huntress's 2024 reporting.
Article Details
- Topic
- Password security statistics, risks, and best practices for protecting individual and business accounts.
People
Vendors
Products
Huntress Managed Identity Threat Detection and Response (ITDR)Huntress Managed Identity Threat Detection and Response (ITDR) protects identities across your organization 24/7, while Huntress Security Awareness Training turns your team into a stronger first line of defense. BecauseHuntress Managed SATHuntress Managed SATHuntress Security Awareness TrainingDetection and Response (ITDR) protects identities across your organization 24/7, while Huntress Security Awareness Training turns your team into a stronger first line of defense. Because the strongest password