Skip to main content

Americans know they shouldn't share their passwords, but do it anyway

95 percent of Americans share at least six passwords with friends or family, even though most people acknowledge this is a bad idea.

That’s according to a LastPass survey of its users, released today in a blog post by Amber Gott that includes an infographic summarizing the findings. The vast majority of passwords, it turns out, aren’t shared online: they’re shared verbally: 74 percent of passwords were shared out loud. 15 percent were shared using pen and paper, leaving around 10 percent to be shared via texting, email, and password management services combined.

The widespread practice of sharing Netflix and HBO Now passwords makes up a chunk of this total: 48 percent of users admitted to sharing passwords for TV or movie streaming. But Wi-Fi passwords are the most shared passwords, with 58 percent of users sayings they shared a password to give guests Internet access. (The remaining 42 percent must not have a router, or friends who visit, or any idea what their Wi-Fi password is.)

But the more surprising results were passwords for financial information, which 43 percent of users share.

“Most shockingly, only 19 percent of respondents say they don’t share passwords that would jeopardize their identity or financial information,” Gott wrote in the post, “leaving 81 percent of people who would share those passwords.”

The figures include sharing passwords with spouses, which should make the total figure a little less surprising. 76 percent of users share passwords with a spouse, but only 26 percent share with their children. Surprisingly, people are more likely to share passwords with a coworker (22 percent) than a friend (16 percent), possibly because of shared accounts.

Another highlight: 58 percent of users are re-using passwords on multiple sites, something every security expert will advise against. And this is a particularly bad idea if you share passwords. Giving your Netflix password to a friend might not seem bad, but if you use the same password for your Gmail account there’s a chance they’ll sneak a peak sometime.

Even worse, 73 percent of users admit they won’t change passwords after sharing them, meaning the potential security problems will only go on.

All of us need to change our password habits up a little bit if we want any reasonable expectation of privacy. But will we do it? Generational trends suggest not. Younger people are by far the most likely to share passwords: 40 percent of people between 18 and 29 are likely to trust their friends with passwords. Meanwhile, only 15 percent of people between 30 and 44 say the same thing.

Justin Pot
Former Digital Trends Contributor
Justin's always had a passion for trying out new software, asking questions, and explaining things – tech journalism is the…
The dark side of ChatGPT: things it can do, even though it shouldn’t
OpenAI and ChatGPT logos are marked do not enter with a red circle and line symbol.

Have you used OpenAI's ChatGPT for anything fun lately? You can ask it to write you a song, a poem, or a joke. Unfortunately, you can also ask it to do things that tend toward being unethical.

ChatGPT is not all sunshine and rainbows -- some of the things it can do are downright nefarious. It's all too easy to weaponize it and use it for all the wrong reasons. What are some of the things that ChatGPT has done, and can do, but definitely shouldn't?
A jack-of-all-trades

Read more
NordPass adds passkey support to banish your weak passwords
password manager lifestyle image

Weak passwords can put your online accounts at risk, but password manager NordPass thinks it has the solution. The app has just added support for passkeys, giving you a far more secure way to keep all your important logins safe and sound.

Instead of a vulnerable password, passkeys work by using your biometric data as your login ‘fingerprint.’ For example, you could use the Touch ID button on a Mac or a facial recognition scanner on your smartphone to log in to your account. No typing required.

Read more
LastPass reveals how it got hacked — and it’s not good news
A depiction of a hacker breaking into a system via the use of code.

Last year was a particularly bad one for password manager LastPass, as a series of hacking incidents revealed some serious weaknesses in its supposedly rock-solid security. Now, we know exactly how those attacks went down -- and the facts are pretty breathtaking.

It all began in August 2022, when LastPass revealed that a threat actor had stolen the app’s source code. In a second, subsequent attack, the hacker combined this data with information found in a separate data breach, then exploited a weakness in a remote-access app used by LastPass employees. That allowed them to install a keylogger onto the computer of a senior engineer at the company.

Read more