The list is probably somewhat biassed. One source of passwords is from reversing publicly available lists of password hashes – but only weak passwords can be obtained in this way, and so weak passwords will be over-represented in the total corpus of known passwords. While a great many people do use “password” as their password, it’s probably not actually as high as 4.7%.
3 Likes
