Password Security: 25 Weak Passwords Zambians Should Avoid

 

ZAMBIA EXPLAINS | CYBER SECURITY

YOUR PASSWORD COULD BE CRACKED IN LESS THAN A SECOND: 25 PASSWORDS YOU SHOULD STOP USING

Article by Rodgers Mangwela | KASONDE24

One second could be all it takes.

Imagine waking up one morning only to discover that someone has accessed your email, taken control of your Facebook account or gained access to sensitive information stored on your phone.

You might immediately suspect sophisticated hacking tools, advanced computer skills or an international cybercriminal network.

But sometimes, the entry point is much simpler: your password.

Cybersecurity researchers have repeatedly warned that millions of internet users continue to rely on predictable passwords that require very little effort to guess. Some of these combinations are so common that automated password-cracking tools can identify them almost immediately, particularly when criminals have obtained password databases from data breaches.

For internet users in Africa, including Zambia, this is an important reminder that digital security begins with the smallest decisions we make when creating online accounts.

The 25 passwords that could put your accounts at risk

Research published by password management company NordPass has repeatedly identified simple number sequences, familiar words and keyboard patterns among the world's most commonly used passwords.

A 2024 study, conducted with cybersecurity researchers, examined publicly available data from multiple countries and identified several predictable password choices.

The following 25 passwords are among the combinations highlighted in the circulating warning:

1. 123456
2. 123456789
3. 12345678
4. password
5. qwerty123
6. qwerty1
7. 111111
8. 12345
9. secret
10. 123123
11. 1234567890
12. 1234567
13. 000000
14. qwerty
15. abc123
16. password1
17. iloveyou
18. 11111111
19. dragon
20. monkey
21. 123123123
22. 123321
23. qwertyuiop
24. 00000000
25. Password

Important: This is a selection of commonly circulated weak passwords, not a verified ranking of the 25 most common passwords worldwide in 2026. Password rankings vary according to the countries, datasets and periods examined.

Nevertheless, the security lesson is clear: predictable passwords should never be trusted to protect important accounts.

Why are these passwords so easy to crack?

Cybercriminals do not necessarily sit behind computers trying thousands of random combinations manually.

They use automated tools capable of testing large numbers of password combinations.

These tools can exploit predictable patterns, including:

• Sequential numbers such as 123456.
• Repeated digits such as 111111.
• Common dictionary words.
• Keyboard patterns such as qwerty.
• Familiar expressions and names.
• Simple variations such as Password1.

Another dangerous technique is known as credential stuffing.

This happens when criminals obtain usernames and passwords exposed in one data breach and attempt to use the same login combinations on other platforms.

For example, someone who uses the same password for Facebook, email and an online shopping account could expose all three accounts if one service suffers a data breach.

This is why password reuse is particularly dangerous.

Your email account could be the biggest target

Many people concentrate on protecting their social media accounts while overlooking the importance of their email passwords.

However, email accounts are often connected to other digital services.

Think about what happens when you forget your Facebook, Instagram or other online account password. The platform may send a password-reset link to your email address.

If someone gains control of that email account, they could potentially use the password recovery process to target other accounts connected to it.

For this reason, your primary email account deserves particularly strong protection.

Your banking applications, mobile money services and other financial accounts also require careful attention.

In Zambia, where mobile financial services and digital communication continue to play an important role in everyday transactions, protecting login credentials and transaction PINs is an essential part of personal financial security.

How to create a password that is difficult to guess

A strong password should not be based on information that people can easily discover about you.

Avoid using your name, date of birth, telephone number, school name, favourite football team or other personal details.

Instead, consider these security practices:

1. Use long passwords

Longer passwords and passphrases generally provide better resistance to guessing attacks.

The National Institute of Standards and Technology (NIST) recommends a minimum of 15 characters for passwords used as a single authentication factor under its current digital identity guidelines.

2. Never reuse passwords

Create a different password for every important online account.

If one account is compromised, unique passwords help prevent criminals from automatically accessing your other accounts.

3. Use a password manager

Password managers can generate and securely store unique passwords, reducing the pressure of remembering dozens of different combinations.

4. Activate two-factor authentication

Where available, enable multi-factor authentication (MFA).

This introduces an additional verification step beyond your password, making unauthorised access more difficult.

5. Protect your PIN

Your mobile banking PIN, mobile money PIN and phone unlock PIN should not be shared with anyone.

Avoid obvious combinations such as 0000, 1111 or your birth year.

What should you do if your password appears on this list?

Do not panic, but take action.

If you are currently using any of the listed combinations, change it immediately.

Start with your primary email account, followed by your social media profiles and other important services.

If you have reused that password elsewhere, change it on every affected account.

Also, review your account security settings, check for unfamiliar login sessions and sign out devices you do not recognise.

If you suspect that an account has already been compromised, use the platform's official account recovery process.

Never share your new password or verification codes with someone claiming to be a technical support representative.

The bigger lesson: Digital security is everyone's responsibility

The internet has created opportunities for education, business, communication and financial inclusion.

For young people, entrepreneurs, teachers, students and small businesses in Zambia, digital platforms are increasingly becoming part of everyday life.

However, the benefits of digital technology come with responsibilities.

A person does not need to be a computer programmer or cybersecurity expert to understand basic digital protection.

Sometimes, the difference between a secure account and an exposed one begins with choosing a better password.

The next time a website asks you to create an account, remember that convenience should not come at the expense of security.

Your password is more than a combination of letters and numbers. It is one of the first barriers protecting your digital identity.

Protect it accordingly.

Published by KASONDE24 – Your window to the world.