April 2, 2018 By David Bisson 2 min read

Security researchers recently claimed that “Tiger” is the most common password relating to sports teams and mascots.

To coincide with the annual NCAA Division I men’s basketball tournament, Keeper Security published a bracket of some of most commonly used sports-related passwords. Among them, “Tiger” and its variations, such as “T1ger” and “T1g3r,” came out on top.

What’s the Most Common Password Related to Sports?

According to a press release, “Tiger” was 850 percent more common than “Bluejay,” the password that appeared least frequently. It was also 187 percent more common than “Eagle,” the runner-up for first place.

Some of the other credentials that appeared in Keeper Security’s bracket were “Bulldog,” “Gator, “Cardinal,” “Wildcat” and “Hurricane.”

Source: Keeper Security

To create this bracket, Keeper Security used a file of compromised credentials uncovered by security firm 4iQ that included 1.4 billion passwords, according to a 4iQ blog post. All of these credentials were in cleartext, meaning that anyone could easily access them.

A Call for Better Account Security

Darren Guccione, CEO and co-founder of Keeper Security, said his company’s bracket reflects the fact that users continue to opt for convenience over security when choosing a password.

“People often choose their passwords based on something they can easily remember,” explained Guccione. “But those are the easiest passwords for hackers to crack. Since most people reuse the same password more than 80 percent of the time, this can compromise consumers’ banking, retail and social media accounts.”

Attackers don’t even need to steal those credentials from improperly secured databases or buy them from underground marketplaces. They can simply brute-force their way into users’ accounts by building and deploying a password cracking tool.

While Keeper’s password bracket is all in good fun, it also illustrated the need for users to embrace better account security practices. They can do so by adopting authentication solutions such as biometrics and by following the recommendations of enterprise security teams. Most will advise users to avoid simple keystroke combinations, stay away from common dictionary words and create unique passwords for each account.

More from

Taking the complexity out of identity solutions for hybrid environments

4 min read - For the past two decades, businesses have been making significant investments to consolidate their identity and access management (IAM) platforms and directories to manage user identities in one place. However, the hybrid nature of the cloud has led many to realize that this ultimate goal is a fantasy. Instead, businesses must learn how to consistently and effectively manage user identities across multiple IAM platforms and directories. As cloud migration and digital transformation accelerate at a dizzying pace, enterprises are left…

IBM identifies zero-day vulnerability in Zyxel NAS devices

12 min read - While investigating CVE-2023-27992, a vulnerability affecting Zyxel network-attached storage (NAS) devices, the IBM X-Force uncovered two new flaws, which when used together, allow for pre-authenticated remote code execution. Zyxel NAS devices are typically used by consumers as cloud storage devices for homes or small to medium-sized businesses. When used together, the flaws X-Force discovered allow a remote attacker to execute arbitrary code on the device with superuser permissions and without requiring any credentials. This results in complete control over the…

What cybersecurity pros can learn from first responders

4 min read - Though they may initially seem very different, there are some compelling similarities between cybersecurity professionals and traditional first responders like police and EMTs. After all, in a world where a cyberattack on critical infrastructure could cause untold damage and harm, cyber responders must be ready for anything. But are they actually prepared? Compared to the readiness of traditional first responders, how do cybersecurity professionals in incident response stand up? Let’s dig deeper into whether the same sense of urgency exists…

Unified endpoint management for purpose-based devices

4 min read - As purpose-built devices become increasingly common, the challenges associated with their unique management and security needs are becoming clear. What are purpose-built devices? Most fall under the category of rugged IoT devices typically used outside of an office environment and which often run on a different operating system than typical office devices. Examples include ruggedized tablets and smartphones, handheld scanners and kiosks. Many different industries are utilizing purpose-built devices, including travel and transportation, retail, warehouse and distribution, manufacturing (including automotive)…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today