page contents 44 million Microsoft users reused passwords in the first three months of 2019 – The News Headline

44 million Microsoft users reused passwords in the first three months of 2019


The Microsoft risk analysis group scanned all Microsoft person accounts and located that 44 million customers had been using usernames and passwords that leaked on-line following safety breaches at different on-line products and services.

The scan came about between January and March 2019.

Microsoft mentioned it scanned person accounts the usage of a database of over 3 billion leaked credentials, which it acquired from more than one assets, equivalent to legislation enforcement and public databases.

The scan successfully helped Microsoft determine customers who reused the similar usernames and passwords throughout other on-line accounts.

Password resets have already taken position

The 44 million overall integrated Microsoft Services and products Accounts (common person accounts), but additionally Azure AD accounts.

“For the leaked credentials for which we discovered a fit, we power a password reset. No further motion is needed at the shopper aspect,” Microsoft mentioned.

“At the undertaking aspect, Microsoft will lift the person chance and alert the administrator in order that a credential reset will also be enforced,” it added.

The OS maker has been a staunch recommend and promoter of multi-factor authentication (MFA) answers.

Previous this summer time, the corporate mentioned that enabling an MFA safety measure for a Microsoft account blocks 99.nine% of all assaults and that MFA bypass makes an attempt are so uncommon its safety group does not also have statistics on this sort of risk.

Detecting 100% of password reuse instances is unimaginable

Microsoft most often warns towards the usage of susceptible or easy-to-guess passwords when putting in an account, however those warnings do not duvet password reuse situations.

It is because customers could be the usage of a fancy password that will cross Microsoft’s tests, however Microsoft has no approach of understanding if the person has reused that password in different places.

As soon as a third-party provider has a safety breach, and the person’s password is stolen and leaked on-line, this inadvertently places the person’s Microsoft account in danger, in spite of having a robust password.

Hackers can take the leaked password and use it in an try to achieve get admission to to the person’s different accounts — equivalent to Microsoft, Google, Fb, Twitter, and many others.. Microsoft calls this a “breach replay assault.”

A 2018 educational analysis find out about of 28.eight million person accounts discovered that password reuse and small changes to the unique password was once not unusual amongst 52% of customers. The similar find out about additionally discovered that 30% of the changed passwords and the entire reused passwords will also be cracked inside simply 10 guesses.

Leave a Reply

Your email address will not be published. Required fields are marked *