45% of IT leaders advocate for regular security training to instil robust password habits and awareness among employees

Only 33% of IT managers reveal that they are currently able to take a proactive approach to credential security.

67% of IT admins cite credential access management as being very important.

36% of IT admins rely on direct conversations for employees to update credentials.

51% of IT leaders say employees don’t take security seriously.

68% of IT managers say employee motivation is the biggest challenge in remediating at-risk credentials.

51% of IT leaders believe that clearly prioritising security actions significantly enhances security posture.

53% of IT managers want to take a proactive approach to credential security.

36% of IT admins cite difficulty tracking employee progress toward more secure practices.

66% of organisations that do not alert employees to update at-risk credentials say they lack the tools or resources to do so effectively.

44% of IT admins say employees struggle with knowing how to change their passwords.

60% of IT managers report their strategies for quickly updating at-risk credentials to be only somewhat effective or completely ineffective.

42% of IT admins rely on email notifications for employees to update credentials.

48% of organisations report ineffective password health monitoring.

Employees take an average of nine days to update weak or compromised credentials.

23% of SMBs use easily hackable passwords with a pet’s name, a series of numbers, or a family member’s name.

Of the successful leaked password login attempts on WordPress sites, 48% are bot-driven. The remaining 52% of successful logins on WordPress sites originate from legitimate, non-bot users.

59% of human traffic is clean from leaked credentials against 41% with leaked passwords.

Only 5% of leaked password login attempts result in access being denied. 90% of these denied requests are bot-driven. The remaining 19% of login attempts fall under other outcomes, such as timeouts or users who changed their passwords

When including bot-driven traffic, 52% of all detected authentication requests contain leaked passwords.