I am trying to evaluate how safe personal accounts are (including my own).
Are there any statistics on the top security flaws which cause accounts to be compromised/stolen?
Like: 25% of cases is common password, 13% of cases is malware accessing passwords in browsers, 10% is password interception on an unsecure channel etc.

I know what I have to do in order to make an account fully secure (end-to-end cryptography using a physical key for both authentication and data), but there is a balance between risk and cost of counter-measures (especially considering the low number of online services offering end-to-end encryption).

  • 2
    You're missing the top item: phishing, where users simply give the account info over or running malware. Do you mean technical flaws? – schroeder Nov 8 at 14:47
  • 1
    You're also missing the top technical root cause: password database dumps. You do you mean user-enabled technical vulnerabilities leading to account compromise? – schroeder Nov 8 at 14:48
  • And, over what time period? The situation changes pretty rapidly. – schroeder Nov 8 at 14:52
  • I'm not sure about e2e encryption for account and data, but 2FA is the number one measure you can take, and it is free. – schroeder Nov 8 at 14:53
  • Your best bet is probably to check lists of top vulnerabilities or top leaks causes and extract what you consider relevant to your context. – Simon Nov 8 at 22:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.