There's a free SMS sending service in our country. It requires a phone number to log in. Once registered, you can send SMS to any phone number within this country. The phone number which you use to send the SMS will be displayed to the recipient.
How risky is it and what will happen in worst case scenarios if one were to use a password such as '123456', 'password', or the phone number itself?
When logged in, here are the information available to the person:
- username (in my case, it's my real name)
- date of birth (I've given a false date of birth)
- contacts: the website gives you the option for storing numbers you send SMS to. Only the name and phone numbers are visible (of course, the name is anything we specify).
Just to be clear, I don't use a password like that, but a friend of mine using this service does. So, I'm trying to convince him with risks that he might be facing.