

“Even well-intentioned users won’t have identity best practices, such as multifactor authentication and avoiding password reuse, in mind when adopting new tools. “The rapid shift to remote work as a result of COVID-19 has simultaneously shifted the balance of control away from IT and towards employees,” said Abe Smith, cybersecurity veteran with decades of information security leadership roles in the Bay Area. What’s more, the average user has more than 8 passwords shared between accounts, with 7.5 passwords shared between work and personal accounts and 0.8 passwords shared between internal and SaaS accounts.

The report also discovered that on average, every single user password is shared across 2.7 accounts. Password reuse is widely prevalent due to the desire for convenience and speed when navigating various accounts. The study found that more than 99% of enterprise users reuse passwords, either across work accounts, or between work and personal accounts. Very few users take appropriate action to significantly reduce the risk of password compromise, according to a Balbix report.
