UK Becomes World’s First To Ban Weak Passwords Like ‘12345’

Photo 118276882 © Adrian825 | Dreamstime.com

In a digital age where “password” can ironically be the key to your downfall, the United Kingdom has taken a bold stride. The nation has put its foot down on weak passwords, making it the first to do so globally.

As of April 29, 2024, the UK has enacted laws that require all internet-connected devices, from your everyday smartphone to your gaming console and even your smart fridge, to adhere to minimum security standards, where cliché passwords like “admin” and “12345” will be rejected.

In instances where devices are initialized with common passwords, users are now required to change these upon setup. This change is a direct response to past cybersecurity breaches, notably the 2016 Mirai attack which compromised over 300,000 devices due to inadequate security measures.

With 99% of UK adults owning at least one smart device and an average of nine connected devices per household, this move is a significant step towards bolstering the UK’s resilience against cyber-crime.

Beyond passwords, the nation thas been making significant headway in other areas of online safety. The Online Safety Act, which received Royal Assent on October 26, 2023, is a comprehensive legislation designed to ensure the safety of online users—children, in particular. It places specific obligations on various online service providers, including duties to manage harmful content on their sites, including illegal content.

Moreover, the UK government has also criminalized cyber-flashing, a practice that typically involves offenders sending unsolicited sexual images to people via social media or dating apps. Last month, the first person in England and Wales was sentenced to two years in prison under this new law.

And just this month, the nation prohibited the making and sharing of sexually explicit deepfakes.

[via The Guardian and Sky News, cover photo 118276882 © Adrian825 | Dreamstime.com]