A new 2025 report reveals we still haven’t learned as easy-to-guess passwords like “123456” and “password” continue to dominate leaked data. Despite growing awareness, millions of users are reusing simple credentials that make scammers’ jobs effortless. Experts say complexity and 2FA remain the best defense against hackers.