7,000 password attacks per second

7,000 per second.

That is how many password attacks Microsoft reported blocking over the year covered in the 2024 Digital Defense Report. Password-based attacks were the bulk of the identity noise.

Climb the ladder:

• Never reuse passwords
• Enable MFA (SMS beats nothing)
• Use passkeys (main + backup)
• Prefer passkeys and disable password login where you can

Reuse is how stuffing scales. MFA raises the cost. Passkeys remove the shared secret.

Find this on LinkedIn and give it a thumbs up: 7,000 password attacks per second

Related

• I don't care that you have a strong password
• Time to enable MFA everywhere