--- title: "World Password Day 2024: '123456' is still a bad idea" description: It has been nearly eleven years since Intel commenced its World Password Day initiative on May 2, 2013 to spread awareness on password protection best practices. This World Password Day draws attention to the latest threats with the goal of encouraging organizations and communities to embrace new strategies to protect sensitive information. canonical_url: https://www.acronis.com/en/blog/posts/world-password-day-123456-is-still-a-bad-idea/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # World Password Day 2024: '123456' is still a bad idea It has been nearly eleven years since Intel commenced its World Password Day initiative on May 2, 2013 to spread awareness on password protection best practices. This World Password Day draws attention to the latest threats with the goal of encouraging organizations and communities to embrace new strategies to protect sensitive information. [Try Now](https://www.acronis.com/en/products/cloud/trial/) [![Image 2: Allison Ho](https://staticfiles.acronis.com/images/content/4001b7fac80a9a9ed6a3a01dec591360.png)](https://www.acronis.com/en/blog/authors/allison-ho/ "Allison Ho") [Allison Ho,](https://www.acronis.com/en/blog/authors/allison-ho/)Content Marketing Manager 4 min read Last updated 22 May 2026 It has been nearly eleven years since Intel commenced its World Password Day initiative on May 2, 2013 to spread awareness on password protection best practices. But over the years the digital landscape has seen significant change, and although threats have become more complex, the importance of strong and unique passwords remains paramount in an era of AI-driven cyberattacks. The effectiveness of traditional passwords has raised concerns amid AI-powered brute force attacks coming into picture. Ideally, multiple security measures should be implemented such as [two-factor authentication (2FA)](https://www.acronis.com/en-us/blog/posts/two-factor-authentication/). Although additional security measures are widely adopted by MSPs, businesses and home users, that does not give us a pass when it comes password creation. We should not make it easy for cybercriminals to crack passwords with minimal effort. This World Password Day draws attention to the latest threats with the goal of encouraging organizations and communities to embrace new strategies to protect sensitive information. ## Predictable passwords: Why rolling the dice elevates your cyber risk “123456,” “password” and “admin” were the [most common passwords](https://www.missioncriticalmagazine.com/articles/94990-123456-is-the-most-common-password-in-the-us-in-2023) used in the U.S. in 2023. Even without a background in IT, it is a no brainer that predictable passwords such as these are like rolling out the welcome mat to cybercriminals. According to the [Acronis Cyberthreats Report H2 2023](https://www.acronis.com/en/resource-center/resource/acronis-cyberthreats-report-h2-2023/), ransomware growth skyrocketed by 63% over the course of 2023. A staggering 44% of ransomware payouts amounted to $25,000-$99,999 — breaches that exposed personal information and other lucrative data. Threat actors are using indirect means to bypass perimeter defenses and get their hands on critical data. In a recent quishing attack (an attack that combines a phony QR code and phishing), adversaries targeted Microsoft 365 users via a bogus email that alerted recipients to update their network password. Users would unknowingly scan the fraudulent QR code to enable a purported MFA method for their Microsoft account. Individuals who fell victim were directed to a look-alike Microsoft page disguised to be legitimate. The fake page would gather the customer’s credentials with illegitimate login fields. What we learn from these attacks can help shape cybersecurity best practices and stress the importance of building strong passwords and regularly updating them. Had the victims updated their password recently, the initial email would have sounded alarms. ## Commemorating World Password Day The Acronis SOC leaders and authors of [Secure MSP](https://www.acronis.com/en/tru/), offer their tips, best practices and insights for building strong, future-proof passwords. [Video 1](https://www.youtube.com/watch?v=M12gnJs0TYY) ## Passwords should be unique On the emphasis of unique passwords, Candid Wuest explained, "Passwords should not be easily guessable or too short to withstand brute force attacks. Equally, when creating passwords, we should ensure that each password is unique for every service, software and online account. If the same password is used across multiple services, a breach in one of them can compromise all the others. Attackers exploit these leaked credentials through credential stuffing attacks, which unfortunately remain highly successful.” In a 2022 [article about security vulnerabilities for SMBs](https://www.forbes.com/sites/forbesbusinesscouncil/2022/07/19/the-top-five-security-vulnerabilities-of-smbs/?sh=6d73717a7b18), Gaidar Magdanurov, President of Acronis, noted, “Weak cybersecurity policies are the usual for many SMBs. Just using weak passwords undermines all safety measures. A modern computer only takes around an hour to break an eight-character password with at least one uppercase letter and one number. Short passwords or passwords with only numbers and letters are even more insecure, with computers able to guess such combinations almost instantly.” Since the evolution of AI-enabled cyberthreats, criminals are abusing AI tools to refine password-breaking techniques and significantly shorten the amount of time it takes them to crack them. It is estimated that an [8-character password takes five minutes](https://www.techrepublic.com/article/how-an-8-character-password-could-be-cracked-in-less-than-an-hour/) to crack. ## Your new ally: The password manager However, managing numerous unique passwords can be challenging and may lead to reverting to bad habits. This is where password managers come in. Password managers are increasingly popular and integrated into various platforms. Well-known options include LastPass, 1Password, and even built-in solutions like Google Chrome's password manager. Many of these tools enhance security by incorporating additional layers of authentication, such as MFA. ## 2FA is good, MFA is better and U2F is ideal Implement multifactor authentication (MFA), biometrics, universal second factor (U2F), and maintain passwords. MFA is rapidly becoming the standard for bolstering password security. This method introduces an extra step during the sign-in process, such as receiving a confirmation text on your phone, answering a security question, or utilizing tokens from authenticator apps. MFA provides an additional security layer that doesn't solely rely on memorizing passwords, making it easier to adopt while enhancing effectiveness. However, MFA alone is not a universal solution for strengthening passwords. It forms part of a broader shift in user mindset. Achieving robust password security requires users to be vigilant and embrace a fresh approach to securing their or their organization’s digital assets. Acronis is actively educating, training and informing [service providers](https://www.acronis.com/en/products/cloud/cyber-protect/), [businesses](https://www.acronis.com/en/products/cyber-protect/) and [home office users](https://www.acronis.com/en/products/true-image/) on the latest cyberthreats, cutting-edge technology and security governance best practices. [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [MSP cybersecurity](https://www.acronis.com/en/blog/tags/msp-cybersecurity/) [Cyber protection for businesses](https://www.acronis.com/en/blog/tags/cyber-protection-for-business/) ## Written by ![Image 3: Allison Ho](https://staticfiles.acronis.com/images/content/4001b7fac80a9a9ed6a3a01dec591360.png) Allison Ho Content Marketing Manager Allison develops content on cybersecurity, data protection, artificial intelligence and endpoint management while closely collaborating with thought leaders. Her technology B2B marketing experience includes expertise in SEO. [Previous post](https://www.acronis.com/en/blog/posts/undelete/) [How to Recover Deleted Files - The Ultimate Guide For Windows and Mac](https://www.acronis.com/en/blog/posts/undelete/) [Next post](https://www.acronis.com/en/blog/posts/introducing-enhanced-plan-management-in-acronis-cyber-protect-cloud-2404/) [Introducing enhanced plan management in Acronis Cyber Platform 24.04](https://www.acronis.com/en/blog/posts/introducing-enhanced-plan-management-in-acronis-cyber-protect-cloud-2404/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 4: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 5: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read ![Image 6: Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://staticfiles.acronis.com/images/blog-card/c2467c28c0278609eb3560cb2a8a4d53.png) [Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-v17-improving-cyber-resilience-across-people-data-and-infrastructure/) Acronis Cyber Protect v17 Q3 2026 expands integrated cyber protection with new capabilities that strengthen security awareness, improve backup operations and extend protection across more virtual environments. The result is stronger cyber resilience, simplified operations and broader protection delivered through a single platform. **October 05, 2026**4 min read