31.1 million breached passwords were over 16 characters in length.

January 1, 2025

Password Security Credentials Data breach Authentication

31.1 million breached passwords were over 16 characters in length. — This cybersecurity statistic was published by Specops Software in January 2025. It covers topics including Password Security, Credentials, Data breach, Authentication. The original data appears in 2024 Specops Breached Password Report. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 1/1/2025

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

31.1 million breached passwords were over 16 characters in length. This data was published by Specops Software and covers Password Security, Credentials, Data breach, Authentication.

Where does this data come from?

This statistic comes from 2024 Specops Breached Password Report, published by Specops Software on January 1, 2025. You can view the original report at Most Common Passwords 2025 - Specops Software.

What cybersecurity topics does this cover?

This statistic relates to Password Security, Credentials, Data breach, Authentication. Browse more statistics on Password Security or from Specops Software.

CYBERSTATS

31.1 million breached passwords were over 16 characters in length.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

44% of New Yorkers use unique passwords for all of their accounts, while 56% reported reusing passwords across multiple accounts.

42% of the world's top 1,000 most visited websites do not enforce any minimum password length requirements.

Only 1%, or five websites, among the top 1,000 most visited websites met all best-practice password criteria.

58% of the world's top 1,000 most visited websites do not require special characters for their passwords.

Only 12% of organisations have moved away from using passwords as their primary method of authentication.

Simple passwords like Pass@123 and P@ssw0rd, which meet basic Active Directory requirements, are frequently used, increasing the risk of password reuse.

Browse by Topic

Stay Ahead of Cyber Threats