REVEALED: The 20 Most Common Passwords in the UAE for 2024 – Is Yours on the List?
A recent report by NordPass, a global leader in password management solutions, has revealed the most commonly used passwords in the UAE for 2024. The findings expose a major cybersecurity concern, as thousands of users continue to rely on weak and easily guessable passwords, making them highly vulnerable to cyberattacks.
NordPass, in collaboration with independent cybersecurity researchers, analyzed millions of leaked passwords from global data breaches. By identifying patterns in these breaches and categorizing them geographically, they compiled the most frequently used passwords in the UAE. The results indicate a persistent trend of users opting for simple and repetitive passwords, which can be cracked in seconds.
Top 20 Most Common Passwords in the UAE (2024)
Among the most commonly used passwords in the UAE, “123456” once again tops the list, followed by other predictable combinations such as **”123456789,” “qwerty123,” “password,” and “admin.” Surprisingly, some users have attempted to create stronger passwords by adding slight variations, such as “P@ssw0rd” or “Qwerty1!”, yet these remain easily guessable for modern hacking algorithms. The presence of “pakistan” in the top 20 further highlights the use of country names, which are also commonly exploited in brute-force attacks.
The most common passwords used in the UAE in 2024 include:
- 123456
- 123456789
- qwerty123
- qwerty1
- 12345678
- password
- 12345
- 123123
- 1234567890
- 1234567
- pakistan
- qwerty
- 111111
- P@ssw0rd
- Password
- Qwerty123
- Qwerty1!
- admin
- 123321Aa@
- Qwerty12
Why Is This a Cybersecurity Concern?
Cybersecurity experts warn that these weak passwords leave individuals and businesses extremely vulnerable to cyber threats, such as hacking, phishing attacks, and financial fraud. The UAE, known for its rapid digital transformation and high internet penetration, is a prime target for cybercriminals.
- Most of these passwords can be cracked in less than a second using automated hacking tools.
- Cybercriminals use brute-force attacks, trying thousands of common passwords to gain access to user accounts.
- Weak passwords lead to identity theft, financial fraud, and business data breaches, which can have severe consequences.
Steps to Strengthen Password Security
To protect against cybersecurity threats, experts recommend adopting strong password hygiene and implementing multi-layered security measures.
- Use Complex Passwords – A strong password should include a mix of uppercase and lowercase letters, numbers, and special characters.
- Avoid Common Words and Sequences – Passwords like “123456” or “password” should never be used.
- Enable Multi-Factor Authentication (MFA) – This adds an extra security layer, making it harder for hackers to access accounts.
- Use a Password Manager – Tools like NordPass can generate and store strong, unique passwords securely.
- Regularly Update Passwords – Changing passwords every few months helps reduce exposure to security threats.
The UAE’s Efforts to Improve Cybersecurity
The UAE government has been actively promoting cybersecurity awareness through various initiatives:
- The UAE Cybersecurity Council is working to enhance digital security frameworks.
- The Dubai Cyber Security Strategy focuses on protecting businesses and individuals from online threats.
- The Telecommunications and Digital Government Regulatory Authority (TDRA) is driving awareness campaigns on best cybersecurity practices.
Despite these efforts, individuals and businesses must take responsibility for their own digital security by implementing stronger authentication measures.
The 2024 list of the most common passwords in the UAE serves as a wake-up call for residents to strengthen their digital security. As cyberattacks become more sophisticated, the use of weak passwords is no longer an option. By adopting stronger password practices and implementing security measures such as multi-factor authentication, UAE residents can significantly reduce the risk of unauthorized access to their accounts.
