Analysis of 32 million breached passwords

[J65nko]

From http://www.net-security.org/secworld.php?id=8742

Imperva released a study analyzing 32 million passwords exposed in the Rockyou.com breach. The data provides a unique glimpse into the way that users select passwords and an opportunity to evaluate the true strength of these as a security mechanism.

The complete study (pdf) : http://www.imperva.com/download.asp?id=239

[Carpetsmoker]

IIRC Bruce Schneier already talks about studies which show that many users choose weak passwords back in 1996 in Applied Cryptography ... To be honest this doesn't come as a surprise to me.